{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "serialNumber": "urn:uuid:094c2a8f-8a3b-4b8e-8f22-53020bb81660",
  "metadata": {
    "timestamp": "2025-03-25T08:52:31.006Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "npm",
          "version": "10.8.2"
        },
        {
          "type": "application",
          "name": "cyclonedx-npm",
          "group": "@cyclonedx",
          "version": "2.1.0",
          "author": "Jan Kowalleck",
          "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        },
        {
          "type": "library",
          "name": "cyclonedx-library",
          "group": "@cyclonedx",
          "version": "7.1.0",
          "author": "Jan Kowalleck",
          "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "name": "redis-commander",
      "version": "0.9.0",
      "bom-ref": "redis-commander@0.9.0",
      "author": "Joe Ferner",
      "description": "Redis web-based management tool written in node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/redis-commander@0.9.0?vcs_url=git%3A%2F%2Fgithub.com%2Fjoeferner%2Fredis-commander.git",
      "externalReferences": [
        {
          "url": "git://github.com/joeferner/redis-commander.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/joeferner/redis-commander#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/joeferner/redis-commander/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": ""
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "name": "bom",
      "group": "@cyclonedx",
      "version": "4.1.0",
      "bom-ref": "@cyclonedx/bom@4.1.0",
      "description": "Meta-package for known CycloneDX Software Bill of Materials (SBOM) generators",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40cyclonedx/bom@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/CycloneDX/cyclonedx-node-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-node-module#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-node-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@cyclonedx/bom/-/bom-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7d16c057d2746b72843334bf18e2c0abcdec3db1e2355bf070bc06fa1d0947ba933aba664533890d832b2172fa56d56a1d13dd616cb82f184dc3cc4959afc71e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@cyclonedx/bom"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "async",
      "version": "3.2.6",
      "bom-ref": "async@3.2.6",
      "author": "Caolan McMahon",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/async@3.2.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/caolan/async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://caolan.github.io/async/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/caolan/async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "86d0940e5c72c822cc81a337c578340b42d6db1a9fb90ea9d39a42108b17bb243e6b592860a4ee04ccd13709b26df2e0bc90cc774af52d39f8f84d138ba0b600"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/async"
        }
      ]
    },
    {
      "type": "library",
      "name": "bcryptjs",
      "version": "2.4.3",
      "bom-ref": "bcryptjs@2.4.3",
      "author": "Daniel Wirtz",
      "description": "Optimized bcrypt in plain JavaScript with zero dependencies. Compatible to 'bcrypt'.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bcryptjs@2.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/dcodeIO/bcrypt.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dcodeIO/bcrypt.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dcodeIO/bcrypt.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9ab5627b93e60621ff7cdac5da9733027df1d0cb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bcryptjs"
        }
      ]
    },
    {
      "type": "library",
      "name": "body-parser",
      "version": "1.20.3",
      "bom-ref": "body-parser@1.20.3",
      "description": "Node.js body parsing middleware",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/body-parser@1.20.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/expressjs/body-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/expressjs/body-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/expressjs/body-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "eeb0310728d432a437fdb1c9cbb0fa3865efc7f30c73822a067fd7d1f70cd5051c008b6966b0446215867a6fadcd71fdd1cf86d35ca931c60904ef58df4db4de"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/body-parser"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "2.6.9",
          "bom-ref": "body-parser@1.20.3|debug@2.6.9",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@2.6.9",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/body-parser/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "body-parser@1.20.3|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/body-parser/node_modules/ms"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "bytes",
      "version": "3.1.2",
      "bom-ref": "bytes@3.1.2",
      "author": "TJ Holowaychuk",
      "description": "Utility to parse a string bytes to bytes and vice-versa",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bytes@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/visionmedia/bytes.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/visionmedia/bytes.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/visionmedia/bytes.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bytes"
        }
      ]
    },
    {
      "type": "library",
      "name": "content-type",
      "version": "1.0.5",
      "bom-ref": "content-type@1.0.5",
      "author": "Douglas Christopher Wilson",
      "description": "Create and parse HTTP Content-Type header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/content-type@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/content-type.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/content-type#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/content-type/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9d38ea7dc045122a4a7570afe180d05827e670b64a9bcd65745d29028a53bf2ac51956dc47a3ff54001de46ecdfb4b53afc42a894d2d15a743e852b836d27038"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/content-type"
        }
      ]
    },
    {
      "type": "library",
      "name": "depd",
      "version": "2.0.0",
      "bom-ref": "depd@2.0.0",
      "author": "Douglas Christopher Wilson",
      "description": "Deprecate all the things",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/depd@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/dougwilson/nodejs-depd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dougwilson/nodejs-depd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dougwilson/nodejs-depd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/depd"
        }
      ]
    },
    {
      "type": "library",
      "name": "destroy",
      "version": "1.2.0",
      "bom-ref": "destroy@1.2.0",
      "author": "Jonathan Ong",
      "description": "destroy a stream if possible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/destroy@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stream-utils/destroy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stream-utils/destroy#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stream-utils/destroy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dac246253697208691d70e22252368374867318ec6a5cfe7f03e2a482270f10a855977fb72e0209c41f1069c1e69570f7af0b69772a98d80b1dcdca941081a26"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/destroy"
        }
      ]
    },
    {
      "type": "library",
      "name": "http-errors",
      "version": "2.0.0",
      "bom-ref": "http-errors@2.0.0",
      "author": "Jonathan Ong",
      "description": "Create HTTP error objects",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/http-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/http-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/http-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "16dc2b1bf7ae0736848d8791a8e825cbb1b4aaf8a25e82569ef107d99d6994175781bca3bf7e291d349bf73a1e1ccc83cb7dfe0d6cb95adf56a3e4d446d39849"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/http-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "inherits",
      "version": "2.0.4",
      "bom-ref": "inherits@2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/inherits.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inherits#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inherits/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inherits"
        }
      ]
    },
    {
      "type": "library",
      "name": "setprototypeof",
      "version": "1.2.0",
      "bom-ref": "setprototypeof@1.2.0",
      "author": "Wes Todd",
      "description": "A small polyfill for Object.setprototypeof",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/wesleytodd/setprototypeof.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/wesleytodd/setprototypeof",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/wesleytodd/setprototypeof/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/setprototypeof"
        }
      ]
    },
    {
      "type": "library",
      "name": "statuses",
      "version": "2.0.1",
      "bom-ref": "statuses@2.0.1",
      "description": "HTTP status utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/statuses@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/statuses.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/statuses#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/statuses/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "470340f59ffb3eb2b4eab60b23314c95a17e97bde2c29ceca9120581b30b6d370b0fa70e6a8f364da59e7cf5d0bc1d9f382e008ee612127752ecdfe64c26e475"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/statuses"
        }
      ]
    },
    {
      "type": "library",
      "name": "toidentifier",
      "version": "1.0.1",
      "bom-ref": "toidentifier@1.0.1",
      "author": "Douglas Christopher Wilson",
      "description": "Convert a string of words to a JavaScript identifier",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/component/toidentifier.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/component/toidentifier#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/component/toidentifier/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/toidentifier"
        }
      ]
    },
    {
      "type": "library",
      "name": "iconv-lite",
      "version": "0.4.24",
      "bom-ref": "iconv-lite@0.4.24",
      "author": "Alexander Shtuchkin",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "url": "git://github.com/ashtuchkin/iconv-lite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/iconv-lite"
        }
      ]
    },
    {
      "type": "library",
      "name": "safer-buffer",
      "version": "2.1.2",
      "bom-ref": "safer-buffer@2.1.2",
      "author": "Nikita Skovoroda",
      "description": "Modern Buffer API polyfill without footguns",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ChALkeR/safer-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ChALkeR/safer-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ChALkeR/safer-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safer-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "on-finished",
      "version": "2.4.1",
      "bom-ref": "on-finished@2.4.1",
      "description": "Execute a callback when a request closes, finishes, or errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/on-finished@2.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/on-finished.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/on-finished#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/on-finished/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/on-finished"
        }
      ]
    },
    {
      "type": "library",
      "name": "ee-first",
      "version": "1.1.1",
      "bom-ref": "ee-first@1.1.1",
      "author": "Jonathan Ong",
      "description": "return the first event in a set of ee/event pairs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonathanong/ee-first.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonathanong/ee-first#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonathanong/ee-first/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "590c61156b0ae2f4f0255732a158b266bc56b21d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ee-first"
        }
      ]
    },
    {
      "type": "library",
      "name": "qs",
      "version": "6.13.0",
      "bom-ref": "qs@6.13.0",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/qs@6.13.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/qs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/qs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/qs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fb7f2a23d48eafcb5f67842624da65314c6a8db7bb2cabef66059d13104e99df9e8194ed8cb07aec6bb41d15f7bbf5ceabb514d8dc7a9ec8ef4b5e99f6ec1fa6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/qs"
        }
      ]
    },
    {
      "type": "library",
      "name": "side-channel",
      "version": "1.0.6",
      "bom-ref": "side-channel@1.0.6",
      "author": "Jordan Harband",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/side-channel@1.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/side-channel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/side-channel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7c35bf119e90f5188ef1e146f078feeeefe85be5eb3d320287008e336fad87603a39b943b58608a6f7bd9be2af23d6780bda9211795a191e9b4c460745eba094"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/side-channel"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-bind",
      "version": "1.0.7",
      "bom-ref": "call-bind@1.0.7",
      "author": "Jordan Harband",
      "description": "Robustly `.call.bind()` a function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bind.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/call-bind#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/call-bind/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1874d2352608090eec707eec67e336ac5a294682e1f2dd9b2d25ba05b82bb4bb1a84e201e62c805497fd1a358addc6130da323e17741a4cd5c03aa484b42afdb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-bind"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-define-property",
      "version": "1.0.0",
      "bom-ref": "es-define-property@1.0.0",
      "author": "Jordan Harband",
      "description": "`Object.defineProperty`, but not IE 8's broken one.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-define-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-define-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-define-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f16b22ca4a1ac4aaacc9d1eba641b5614d840cdbb09f4f54f7e7e8028031682fcd892ec5ea4c9efacefe80d182ce8049cb50cbcbcec0ec188ae5f0d1694f681"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-define-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-intrinsic",
      "version": "1.2.4",
      "bom-ref": "get-intrinsic@1.2.4",
      "author": "Jordan Harband",
      "description": "Get and robustly cache all JS language-level intrinsics at first require time",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/get-intrinsic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/get-intrinsic#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/get-intrinsic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e6e621b091fc549053bfba2c960e01ce7258843a1123ac1a602c4c9827674eb702ac703f7c214aa13173d8928a1341dd0c5505effa10ba1cee99724aee968145"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-intrinsic"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-errors",
      "version": "1.3.0",
      "bom-ref": "es-errors@1.3.0",
      "author": "Jordan Harband",
      "description": "A simple cache for a few of the JS Error constructors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "function-bind",
      "version": "1.1.2",
      "bom-ref": "function-bind@1.1.2",
      "author": "Raynos",
      "description": "Implementation of Function.prototype.bind",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/Raynos/function-bind.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/function-bind",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/function-bind/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/function-bind"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-function-length",
      "version": "1.2.2",
      "bom-ref": "set-function-length@1.2.2",
      "author": "Jordan Harband",
      "description": "Set a function's length property",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-function-length@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/set-function-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/set-function-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/set-function-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a6045ce21278fec363582492f409a74b8d31ddb34c0d39271e02f951a3014ccc899d4f741205a1d51cfe302f5e16ee01b8dfd4c198ca42e63fd6fdeb33b1cc7e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-function-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "define-data-property",
      "version": "1.1.4",
      "bom-ref": "define-data-property@1.1.4",
      "author": "Jordan Harband",
      "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/define-data-property@1.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/define-data-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/define-data-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/define-data-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ac132f23396903cbfa13e489668a3ef87018aac2eb920ecc49f2229cc3c5866928af0ed7f9d39754942cf904faf731a4cccc9f0e720c3765a2775f8d6cbdd3f8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/define-data-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "gopd",
      "version": "1.0.1",
      "bom-ref": "gopd@1.0.1",
      "author": "Jordan Harband",
      "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gopd@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/gopd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/gopd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/gopd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gopd/-/gopd-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "77ae5b36521a771be96ff03669b55d96a2aa579eb78ee4676755ad93ab35b0847cb8db1747bd31a88cd5ab155fd5e4ea0ee9f04f632473311e69ecc2293661c0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gopd"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-property-descriptors",
      "version": "1.0.2",
      "bom-ref": "has-property-descriptors@1.0.2",
      "author": "Jordan Harband",
      "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-property-descriptors@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-property-descriptors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/has-property-descriptors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/has-property-descriptors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e7924d2ae216fafab829ed418ce4e333661cb5022f093ec61731f099f64f1a8e709eb82489dd1842d9c095e152aae9999b86b3de7d814be7ab6f2e62a49760ae"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-property-descriptors"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-proto",
      "version": "1.0.3",
      "bom-ref": "has-proto@1.0.3",
      "author": "Jordan Harband",
      "description": "Does this environment have the ability to get the [[Prototype]] of an object on creation with `__proto__`?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-proto@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-proto.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/has-proto#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/has-proto/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-proto/-/has-proto-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "489d5a999009522652f8f86c54b7f9b46c9d95a541f04745a5a48ee209a250a50ec64f2ace7e40232e19789526876db39c8764fee300513da9977171cd5507f9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-proto"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-symbols",
      "version": "1.0.3",
      "bom-ref": "has-symbols@1.0.3",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/has-symbols.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9772c2b85e8c8033704c32a47581848a1623b79a513db120e3aaed9669d23e551b82607c2ce22b2896d86050526e73da25ec4c2ad88f3bc8667918d1cf64ddf8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-symbols"
        }
      ]
    },
    {
      "type": "library",
      "name": "hasown",
      "version": "2.0.2",
      "bom-ref": "hasown@2.0.2",
      "author": "Jordan Harband",
      "description": "A robust, ES3 compatible, \"has own property\" predicate.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hasown@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/hasOwn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/hasOwn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/hasOwn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d21254f5208fbe633320175916a34f5d66ba76a87b59d1f470823dcbe0b24bcac6de72f8f01725adaf4798a8555541f23d6347e58ef10f0001edb7e04a391431"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hasown"
        }
      ]
    },
    {
      "type": "library",
      "name": "object-inspect",
      "version": "1.13.2",
      "bom-ref": "object-inspect@1.13.2",
      "author": "James Halliday",
      "description": "string representations of objects in node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-inspect@1.13.2",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/object-inspect.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/object-inspect",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/object-inspect/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "21165246ecc98b29de9805cf62d3dee41a08fd111235847b4d89b9d0c0b932a6dddc99b0e72efdd2c12b630dd5e92af21490fae1bef8a9042cf709f9060fe4de"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-inspect"
        }
      ]
    },
    {
      "type": "library",
      "name": "raw-body",
      "version": "2.5.2",
      "bom-ref": "raw-body@2.5.2",
      "author": "Jonathan Ong",
      "description": "Get and validate the raw body of a readable stream.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/raw-body@2.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/stream-utils/raw-body.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stream-utils/raw-body#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stream-utils/raw-body/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f331aaca97c4363088a868605d3a02f1a076afb62b057f804007c83ecfcc964f81b4f4f3b4ebd34b4d4d456ff7121eb427e6b8f25b7caac0b38ab43a9680957c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/raw-body"
        }
      ]
    },
    {
      "type": "library",
      "name": "unpipe",
      "version": "1.0.0",
      "bom-ref": "unpipe@1.0.0",
      "author": "Douglas Christopher Wilson",
      "description": "Unpipe a stream from all destinations",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stream-utils/unpipe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stream-utils/unpipe#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stream-utils/unpipe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/unpipe"
        }
      ]
    },
    {
      "type": "library",
      "name": "type-is",
      "version": "1.6.18",
      "bom-ref": "type-is@1.6.18",
      "description": "Infer the content-type of a request.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/type-is@1.6.18",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/type-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/type-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/type-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4e444aafdb144f1107f0c75fb8248fed58b3272cd134c8e3d89d9da3626bdcaca6e7df0955d124b2eccf4029e514f5b8932f50fa203e99af411a6d3a5d0072f2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "media-typer",
      "version": "0.3.0",
      "bom-ref": "media-typer@0.3.0",
      "author": "Douglas Christopher Wilson",
      "description": "Simple RFC 6838 media type parser and formatter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/media-typer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/media-typer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/media-typer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8710d7af0aa626f8fffa1ce00168545263255748"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/media-typer"
        }
      ]
    },
    {
      "type": "library",
      "name": "mime-types",
      "version": "2.1.35",
      "bom-ref": "mime-types@2.1.35",
      "description": "The ultimate javascript content-type utility.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/mime-types.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/mime-types#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/mime-types/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime-types"
        }
      ]
    },
    {
      "type": "library",
      "name": "mime-db",
      "version": "1.52.0",
      "bom-ref": "mime-db@1.52.0",
      "description": "Media Type Database",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/mime-db.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/mime-db#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/mime-db/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime-db"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify",
      "version": "17.0.0",
      "bom-ref": "browserify@17.0.0",
      "author": "James Halliday",
      "description": "browser-side require() the node way",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify@17.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/browserify/browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify/-/browserify-17.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "49a1eace192ef6ffe3e97b10311c4fc81ad23f7827c26136ee02c961980c4f619e2b7274fb4b6837e327b8d6037c7c151907cb88c67b2923522171de9b2f74e7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "assert",
      "version": "1.5.0",
      "bom-ref": "assert@1.5.0",
      "description": "The node.js assert module, re-packaged for web browsers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/assert@1.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/commonjs-assert.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/commonjs-assert",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/commonjs-assert/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/assert/-/assert-1.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "103b206b0cf0a2e9f609990282dc496efdfddafe276e4f570c3d3acc8fa4418a0133fdd10562e51322404433a6840028b018d600212428be92fa5219b5c02e6c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/assert"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "util",
          "version": "0.10.3",
          "bom-ref": "assert@1.5.0|util@0.10.3",
          "author": "Joyent",
          "description": "Node.JS util module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/util@0.10.3",
          "externalReferences": [
            {
              "url": "git://github.com/defunctzombie/node-util.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/defunctzombie/node-util",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/defunctzombie/node-util/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/util/-/util-0.10.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "7afb1afe50805246489e3db7fe0ed379336ac0f9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/assert/node_modules/util"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "inherits",
          "version": "2.0.1",
          "bom-ref": "assert@1.5.0|inherits@2.0.1",
          "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/inherits@2.0.1",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/inherits.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/inherits#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/inherits/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "b17d08d326b4423e568eff719f91b0b1cbdf69f1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/assert/node_modules/inherits"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "object-assign",
      "version": "4.1.1",
      "bom-ref": "object-assign@4.1.1",
      "author": "Sindre Sorhus",
      "description": "ES2015 `Object.assign()` ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/object-assign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-assign"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browser-pack",
      "version": "6.1.0",
      "bom-ref": "browser-pack@6.1.0",
      "author": "James Halliday",
      "description": "pack node-style source files from a json stream into a browser bundle",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browser-pack@6.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/browser-pack.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/browser-pack",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/browser-pack/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browser-pack/-/browser-pack-6.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7ab62e83c5e8ab353721f714f1f520c87ab2397a88138b544d343eee6a948d096f9d790e3ba3a54fd73f6682551d8a006aa1b1af4f42379dc6ed722c3b82ad58"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browser-pack"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "combine-source-map",
      "version": "0.8.0",
      "bom-ref": "combine-source-map@0.8.0",
      "author": "Thorsten Lorenz",
      "description": "Add source maps of multiple files, offset them and then combine them into one source map",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/combine-source-map@0.8.0",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/combine-source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/combine-source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/combine-source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/combine-source-map/-/combine-source-map-0.8.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a58d0df042c186fcf822a8e8015f5450d2d79a8b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/combine-source-map"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "convert-source-map",
      "version": "1.1.3",
      "bom-ref": "convert-source-map@1.1.3",
      "author": "Thorsten Lorenz",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/convert-source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/convert-source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/convert-source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4829c877e9fe49b3161f3bf3673888e204699860"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/convert-source-map"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "inline-source-map",
      "version": "0.6.2",
      "bom-ref": "inline-source-map@0.6.2",
      "author": "Thorsten Lorenz",
      "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inline-source-map@0.6.2",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/inline-source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/inline-source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/inline-source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inline-source-map/-/inline-source-map-0.6.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f9393471c18a79d1724f863fa38b586370ade2a5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inline-source-map"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map",
      "version": "0.5.7",
      "bom-ref": "source-map@0.5.7",
      "author": "Nick Fitzgerald",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/mozilla/source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mozilla/source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mozilla/source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.memoize",
      "version": "3.0.4",
      "bom-ref": "lodash.memoize@3.0.4",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.memoize` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.memoize@3.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-3.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2dcbd2c287cbc0a55cc42328bd0c736150d53e3f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.memoize"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "defined",
      "version": "1.0.0",
      "bom-ref": "defined@1.0.0",
      "author": "James Halliday",
      "description": "return the first argument that is `!== undefined`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/defined@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/defined.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/defined",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/defined/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/defined/-/defined-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c98d9bcef75674188e110969151199e39b1fa693"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/defined"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "JSONStream",
      "version": "1.3.5",
      "bom-ref": "JSONStream@1.3.5",
      "author": "Dominic Tarr",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "licenses": [
        {
          "expression": "(MIT OR Apache-2.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/jsonstream@1.3.5",
      "externalReferences": [
        {
          "url": "git://github.com/dominictarr/JSONStream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dominictarr/JSONStream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/JSONStream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "13e8abb8d398f1557db382446ded5a3449ba322b333d1aff51f707333d13421d415d2c472be01257547a5b81e98c1852792fb9e0f22c00c0819b00f4e8b2eca9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/JSONStream"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-buffer",
      "version": "5.1.2",
      "bom-ref": "safe-buffer@5.1.2",
      "author": "Feross Aboukhadijeh",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/feross/safe-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/safe-buffer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/safe-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "through2",
      "version": "2.0.5",
      "bom-ref": "through2@2.0.5",
      "author": "Rod Vagg",
      "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through2@2.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/through2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/through2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/through2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through2/-/through2-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fe6ad1a1df31aa903e20748bc86090dacf123c78820c47902527a9d63a8b61e1140a53851b642c87ee0553a1bd55eaa9667196fd2bbc2d019ce182a78b9ad849"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through2"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "umd",
      "version": "3.0.3",
      "bom-ref": "umd@3.0.3",
      "author": "ForbesLindesay",
      "description": "Universal Module Definition for use in automated build systems",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/umd@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/umd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/umd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/umd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/umd/-/umd-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e087064ae7e116c86f2cd70c095f34527415959e6930e0bc9af34f168aeac00e3e973610b9eb531122c342478b9a286af1b45c9e96d06b8f166fc2e1d7aff1a3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/umd"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browser-resolve",
      "version": "2.0.0",
      "bom-ref": "browser-resolve@2.0.0",
      "author": "Roman Shtylman",
      "description": "resolve which handles browser field support in package.json",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browser-resolve@2.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/browser-resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/browser-resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/browser-resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "eec5ac42560bdab18bcb62169bc58bf0309326f60b73faa53a7b1a90369cf3b48ea02775e962ec68031d0a202ab1334721ef925df6aacb1ca8e931e85aab3c59"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browser-resolve"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve",
      "version": "1.20.0",
      "bom-ref": "resolve@1.20.0",
      "author": "James Halliday",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.20.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c043413ede324b3838c9b1505b64d3d73310b9c3caf791d287f9ead82153655386baddbea50bd2b20b5d6b8776e98ad872bd3aef08db9b3386f1bc833c15fadc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-zlib",
      "version": "0.2.0",
      "bom-ref": "browserify-zlib@0.2.0",
      "author": "Devon Govett",
      "description": "Full zlib module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/devongovett/browserify-zlib.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/devongovett/browserify-zlib",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/devongovett/browserify-zlib/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "67de36472b075e626b86a93cf0598a055abfbf9b6a992903cfba79e06fcc1b28cc9c21459c2efd5d635b83e56d6bc5ba59bdaab526534b1206909ad1a4214488"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-zlib"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "pako",
      "version": "1.0.11",
      "bom-ref": "pako@1.0.11",
      "description": "zlib port to javascript - fast, modularized, with browser support",
      "licenses": [
        {
          "expression": "(MIT AND Zlib)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/pako@1.0.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/pako.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/pako",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/pako/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e212c1f0fcb8cd971ee6ce3277d5f3a29ab056fff218d855d4197c353982ab5efadc778adbe130553bfe95e19e2f5dc39e1db07dbaa8c153d70883b4cf8b5a63"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pako"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "buffer",
      "version": "5.2.1",
      "bom-ref": "buffer@5.2.1",
      "author": "Feross Aboukhadijeh",
      "description": "Node.js Buffer API, for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/buffer@5.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/buffer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/buffer/-/buffer-5.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "73e2a8d25a036857ee3d688bd3696cf5777718eddc3d5994a1b43ab77ad7354937d38bba846abef0dfe4162f901082a1ccadeec2895584bcecce67cb98c2e7aa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/buffer"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "base64-js",
      "version": "1.5.1",
      "bom-ref": "base64-js@1.5.1",
      "author": "T. Jameson Little",
      "description": "Base64 encoding/decoding in pure JS",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "url": "git://github.com/beatgammit/base64-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/beatgammit/base64-js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/beatgammit/base64-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/base64-js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "ieee754",
      "version": "1.2.1",
      "bom-ref": "ieee754@1.2.1",
      "author": "Feross Aboukhadijeh",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/ieee754.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/ieee754#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/ieee754/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ieee754"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "cached-path-relative",
      "version": "1.1.0",
      "bom-ref": "cached-path-relative@1.1.0",
      "description": "Memoize the results of the path.relative function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cached-path-relative@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/ashaffer/cached-path-relative.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ashaffer/cached-path-relative#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ashaffer/cached-path-relative/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cached-path-relative/-/cached-path-relative-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "585d0b8a17de9ad7ac15c2603bbc5f3a839c9d6cd8fd01d1e2a783a95e388cf5371d3239e3e2e77d72b7480dbb01554609d6458238c515aa9403d271edd30964"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cached-path-relative"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-stream",
      "version": "1.6.2",
      "bom-ref": "concat-stream@1.6.2",
      "author": "Max Ogden",
      "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/maxogden/concat-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/maxogden/concat-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/maxogden/concat-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dbb1c18212718e266d224dd872f9ffe246c993fd6e66e2457ee3c49ece8b684be9bc6d5fd214de6bc96296ba2eca8f6655cd8659d70467c38ba0699200396b0b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-stream"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "buffer-from",
      "version": "1.1.1",
      "bom-ref": "buffer-from@1.1.1",
      "description": "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/LinusU/buffer-from.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/LinusU/buffer-from#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/LinusU/buffer-from/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3107171146c22ad128edb86a12ceb9eb41f27785daa2f6653bf93d57786355417fcf05bb28155d48ae2022dfdbcf04bd31b479aa86fe1798eeb19b1bd1840ad8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/buffer-from"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "readable-stream",
      "version": "2.3.7",
      "bom-ref": "readable-stream@2.3.7",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.7",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/readable-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodejs/readable-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodejs/readable-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "11b868f0ae2321b1c0c67bb18bba38d8ead9805fd94cd72c663ea744ac949a484b16af021c8b69fdfcba85066e6663ff9f7c99f550546e9e33cff997f219983f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readable-stream"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "typedarray",
      "version": "0.0.6",
      "bom-ref": "typedarray@0.0.6",
      "author": "James Halliday",
      "description": "TypedArray polyfill for old browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "url": "git://github.com/substack/typedarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/typedarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/typedarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typedarray"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "console-browserify",
      "version": "1.2.0",
      "bom-ref": "console-browserify@1.2.0",
      "author": "Raynos",
      "description": "Emulate console for all the browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "http://github.com/browserify/console-browserify/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/console-browserify@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/console-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/console-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/console-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "64c9183bf2e4175ed0bc23ea334831c3cc94ce28003993925921e0f75147ea8ad2eef7048f975565389d3767d0d78c8149d83ded1aa148dc0b517227779d8e4c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/console-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "constants-browserify",
      "version": "1.0.0",
      "bom-ref": "constants-browserify@1.0.0",
      "author": "Julian Gruber",
      "description": "node's constants module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/constants-browserify@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/constants-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/constants-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/constants-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c20b96d8c617748aaf1c16021760cd27fcb8cb75"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/constants-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "crypto-browserify",
      "version": "3.12.0",
      "bom-ref": "crypto-browserify@3.12.0",
      "author": "Dominic Tarr",
      "description": "implementation of crypto for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.12.0",
      "externalReferences": [
        {
          "url": "git://github.com/crypto-browserify/crypto-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/crypto-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/crypto-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.12.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7f3e2ca4887ece78ced958cbf88761129449dd837ab0ccc84d20628e4e852b652f4eaaee4905befdc0994d236c32264dbd47aad02aaeac5f9d01bca218e63a5a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/crypto-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-cipher",
      "version": "1.0.1",
      "bom-ref": "browserify-cipher@1.0.1",
      "author": "Calvin Metcalf",
      "description": "ciphers for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-cipher@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/crypto-browserify/browserify-cipher.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-cipher#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-cipher/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-cipher/-/browserify-cipher-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b0f864cf401129b7f8ad142dda14e9007aa7e3b5f79652e45069fec442732e3c18f0b46cda9d2fee58ef239132a113bf99ec6b36e9cd1028ac66cfa0c36cf3d7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-cipher"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-aes",
      "version": "1.2.0",
      "bom-ref": "browserify-aes@1.2.0",
      "description": "aes, for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-aes@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/crypto-browserify/browserify-aes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-aes",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-aes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fbb0875ea1aeb29527fd297968eec46b4c56180b444cf5cd4808c7a38f097cb74f59c327837dd77b8ce716f4307aa73fbb3939cd2388dc7e760989e309f6f984"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-aes"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "buffer-xor",
      "version": "1.0.3",
      "bom-ref": "buffer-xor@1.0.3",
      "author": "Daniel Cousens",
      "description": "A simple module for bitwise-xor on buffers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/buffer-xor@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/buffer-xor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/buffer-xor",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/buffer-xor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/buffer-xor/-/buffer-xor-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "26e61ed1422fb70dd42e6e36729ed51d855fe8d9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/buffer-xor"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "cipher-base",
      "version": "1.0.4",
      "bom-ref": "cipher-base@1.0.4",
      "author": "Calvin Metcalf",
      "description": "abstract base class for crypto-streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cipher-base@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/cipher-base.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/cipher-base#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/cipher-base/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2a486de727ba6469b0bf8d2e503673b5ac93d9384b4067e78ff4fbd4dfd7cde65ea379dff1fa325bbcc64ec3d8904c9ade6e5fddc032a47faa7bb60eaccd54d9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cipher-base"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "create-hash",
      "version": "1.2.0",
      "bom-ref": "create-hash@1.2.0",
      "description": "create hashes for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/create-hash@1.2.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/crypto-browserify/createHash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHash",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/create-hash/-/create-hash-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cf4d1b0863470c6f261c090fec2b53d6a56ef9b15050f8d8abfe08bf70b79168d3155d74cc88df4a87aa5e8f40b30b3c8304870c68ff865daee0e1888daa5e0a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/create-hash"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "evp_bytestokey",
      "version": "1.0.3",
      "bom-ref": "evp_bytestokey@1.0.3",
      "author": "Calvin Metcalf",
      "description": "The insecure key derivation algorithm from OpenSSL",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/evp_bytestokey@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/EVP_BytesToKey.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/evp_bytestokey/-/evp_bytestokey-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fdfd86a384e88271ff2af08848fece52c1e7f39853f67524c7103d0445b1167f8e8fda3c64d2e6ff8d217658122f2b8e8a6b2b4ca2d4304a2b41ec69fda3d078"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/evp_bytestokey"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-des",
      "version": "1.0.2",
      "bom-ref": "browserify-des@1.0.2",
      "author": "Calvin Metcalf",
      "description": "browserify-des ===",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-des@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/browserify-des.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-des#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-des/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-des/-/browserify-des-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "062a0ed717f7845c33e2473a881848de27831689a9321acc9670c50b8ff4fef779328929b8073747e2d86f04c0f40e5873da6af5460fa9f7caa56d8e6eec17e4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-des"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "des.js",
      "version": "1.0.1",
      "bom-ref": "des.js@1.0.1",
      "author": "Fedor Indutny",
      "description": "DES implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/des.js@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/des.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/des.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/des.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/des.js/-/des.js-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "434238a5f16bbf654f777e3fbdf2eb14ea119a5623dce579d22edfb24a6cd636562b5900a4c5964fd1ba45151e61e74b7010c8867483694bc931bdc085495a10"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/des.js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimalistic-assert",
      "version": "1.0.1",
      "bom-ref": "minimalistic-assert@1.0.1",
      "description": "minimalistic-assert ===",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/calvinmetcalf/minimalistic-assert.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/calvinmetcalf/minimalistic-assert",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/calvinmetcalf/minimalistic-assert/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "52d25c003e3211a1ad8cf7b35ae3bdc02e27c149d51fff3f226df210740fe1bebb717943fd0afd85d213094d710db4845e0d9728d68ff23b11795eef41dd34fc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimalistic-assert"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "md5.js",
      "version": "1.3.5",
      "bom-ref": "md5.js@1.3.5",
      "author": "Kirill Fomichev",
      "description": "node style md5 on pure JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/md5.js@1.3.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/md5.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/md5.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/md5.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/md5.js/-/md5.js-1.3.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c62b4ff96c4d3dc4d33a09d325cae1334c6f74f7a98a93d27f723c108a4629e14b8eddcf9492c80c6deef045f9dd922e6e46fee54dbedeb10b6291211e1cdd92"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/md5.js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-sign",
      "version": "4.2.2",
      "bom-ref": "browserify-sign@4.2.2",
      "description": "adds node crypto signing for browsers",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-sign@4.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/browserify-sign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-sign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-sign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-4.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d6bb9d1b2798638d8393ab5ec66bfb73855c43412cbd56cbc19900f80401ed2c6f5f199c0fdde370789ef1bcde709f82843966026d90caed3e09c839ba16570a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-sign"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "3.6.2",
          "bom-ref": "browserify-sign@4.2.2|readable-stream@3.6.2",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@3.6.2",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/browserify-sign/node_modules/readable-stream"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.2.1",
          "bom-ref": "browserify-sign@4.2.2|safe-buffer@5.2.1",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.2.1",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/browserify-sign/node_modules/safe-buffer"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "bn.js",
      "version": "5.2.1",
      "bom-ref": "bn.js@5.2.1",
      "author": "Fedor Indutny",
      "description": "Big number implementation in pure javascript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bn.js@5.2.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/bn.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/bn.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/bn.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bn.js/-/bn.js-5.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "79746f1f35b260f06e078341cb47266108c68ad52bb6ac1bbe5ccfdc6e951673516ec650231435d0f6ca287b7c819fc75bf0ffef8eda0e5f90903aa0dca40b31"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bn.js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-rsa",
      "version": "4.1.0",
      "bom-ref": "browserify-rsa@4.1.0",
      "description": "RSA for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-rsa@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/browserify-rsa.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-rsa#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-rsa/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "01d1044741e4b29827a36691f7b4807fabe2d32d24f0db8ea469d51f73bdf6b700e50eac87c43172782d1ee27ab97c277c05cd3381a7d466fbfcc575f9899ba2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-rsa"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "randombytes",
      "version": "2.1.0",
      "bom-ref": "randombytes@2.1.0",
      "description": "random bytes from browserify stand alone",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/crypto-browserify/randombytes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/randombytes",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/randombytes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bd897788e5fee022945aec468bd5248627ba7eca97a92f4513665a89ce2d3450f637641069738c15bb8a2b84260c70b424ee81d59a78d49d0ba53d2847af1a99"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/randombytes"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "create-hmac",
      "version": "1.1.7",
      "bom-ref": "create-hmac@1.1.7",
      "description": "node style hmacs in the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/create-hmac@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/createHmac.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHmac",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHmac/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3091bd962899fa881ce13cd4c2ebdb111d4945d82f505481e7e551fe0e61f367c668845631675db4a0478bbfec5617e3419e927a197286f418adc6246942292e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/create-hmac"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "elliptic",
      "version": "6.6.1",
      "bom-ref": "elliptic@6.6.1",
      "author": "Fedor Indutny",
      "description": "EC cryptography",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/elliptic@6.6.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/elliptic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/elliptic",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/elliptic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/elliptic/-/elliptic-6.6.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "45a75dbef31ab4ad8b247a8527e600e16cac54de48b5af44df96e8b6a218b294384e444094289c77328e8e5cafff565ae51c93367edd8bffde115d2e4c07dede"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/elliptic"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.0",
          "bom-ref": "elliptic@6.6.1|bn.js@4.12.0",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "73df017f7b4f9e223eb1cb1d936dfb92ed43737ba35d04d283288f50310e7bbb51921aeaae276f87c92506fd07084b28d4e2ce61c1ee0affdc4ba0cdc4a1fe64"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/elliptic/node_modules/bn.js"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "brorand",
      "version": "1.1.0",
      "bom-ref": "brorand@1.1.0",
      "author": "Fedor Indutny",
      "description": "Random number generator for browsers and node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/brorand@1.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/brorand.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/brorand",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/brorand/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/brorand/-/brorand-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "12c25efe40a45e3c323eb8675a0a0ce57b22371f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/brorand"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "hash.js",
      "version": "1.1.7",
      "bom-ref": "hash.js@1.1.7",
      "author": "Fedor Indutny",
      "description": "Various hash functions that could be run by both browser and node",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hash.js@1.1.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/hash.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/hash.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/hash.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hash.js/-/hash.js-1.1.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b5a39ab241ade33e1238034db1e3af8980ef8c42629c8911826a7b2db28fd984d3995c56065f3bb3fbb32bdafee3805c9414a9d97ecad61a9e35fcfd25b05e5c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hash.js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "hmac-drbg",
      "version": "1.0.1",
      "bom-ref": "hmac-drbg@1.0.1",
      "author": "Fedor Indutny",
      "description": "Deterministic random bit generator (hmac)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hmac-drbg@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/hmac-drbg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/hmac-drbg#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/hmac-drbg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hmac-drbg/-/hmac-drbg-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d2745701025a6c775a6c545793ed502fc0c649a1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hmac-drbg"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimalistic-crypto-utils",
      "version": "1.0.1",
      "bom-ref": "minimalistic-crypto-utils@1.0.1",
      "author": "Fedor Indutny",
      "description": "Minimalistic tools for JS crypto modules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/minimalistic-crypto-utils#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/minimalistic-crypto-utils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimalistic-crypto-utils"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "parse-asn1",
      "version": "5.1.6",
      "bom-ref": "parse-asn1@5.1.6",
      "description": "utility library for parsing asn1 files for use with browserify-sign.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parse-asn1@5.1.6",
      "externalReferences": [
        {
          "url": "git://github.com/crypto-browserify/parse-asn1.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/parse-asn1#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/parse-asn1/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-5.1.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "467651a3510f53a2419eb6b6bc61e3d32869e9e6f28c166999408b1d6885871973bc1082a40b99ede96c069d4f5406d0374ff4e150ffd7dadfce5052c0bb2d33"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parse-asn1"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "asn1.js",
      "version": "5.4.1",
      "bom-ref": "asn1.js@5.4.1",
      "author": "Fedor Indutny",
      "description": "ASN.1 encoder and decoder",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/asn1.js@5.4.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/asn1.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/asn1.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/asn1.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/asn1.js/-/asn1.js-5.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f88fffe1c60f71c57c2dd9812e25fc098bdff52a77bd0b2baaed9035745cadb896bdcc7f51d9458aa509273c5143182c666be15e19f871229e4a6a058d576ea4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/asn1.js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.0",
          "bom-ref": "asn1.js@5.4.1|bn.js@4.12.0",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "73df017f7b4f9e223eb1cb1d936dfb92ed43737ba35d04d283288f50310e7bbb51921aeaae276f87c92506fd07084b28d4e2ce61c1ee0affdc4ba0cdc4a1fe64"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/asn1.js/node_modules/bn.js"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "pbkdf2",
      "version": "3.1.2",
      "bom-ref": "pbkdf2@3.1.2",
      "author": "Daniel Cousens",
      "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pbkdf2@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/pbkdf2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/pbkdf2",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/pbkdf2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8ae87b2fa8c0ec9106bb65b10f0b503f575d3a9689342e0a9431057dd41a8d21a018f362e0ec8373647b4276d8d9b47d4230551b082f4dd34966813b45ac5430"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pbkdf2"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "string_decoder",
      "version": "1.1.1",
      "bom-ref": "string_decoder@1.1.1",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/string_decoder.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodejs/string_decoder",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodejs/string_decoder/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string_decoder"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "util-deprecate",
      "version": "1.0.2",
      "bom-ref": "util-deprecate@1.0.2",
      "author": "Nathan Rajlich",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/util-deprecate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util-deprecate"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "create-ecdh",
      "version": "4.0.4",
      "bom-ref": "create-ecdh@4.0.4",
      "author": "Calvin Metcalf",
      "description": "createECDH but browserifiable",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/create-ecdh@4.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/createECDH.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/createECDH",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/createECDH/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-4.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "99ff930b1f3059cf55a6ec5f3f686dd2248848b667b742605a5ace29988dab25195a78c868221535002b3079c264a7c461183a20cec0f8d789a0df207ff5acd0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/create-ecdh"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.0",
          "bom-ref": "create-ecdh@4.0.4|bn.js@4.12.0",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "73df017f7b4f9e223eb1cb1d936dfb92ed43737ba35d04d283288f50310e7bbb51921aeaae276f87c92506fd07084b28d4e2ce61c1ee0affdc4ba0cdc4a1fe64"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/create-ecdh/node_modules/bn.js"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "hash-base",
      "version": "3.1.0",
      "bom-ref": "hash-base@3.1.0",
      "author": "Kirill Fomichev",
      "description": "abstract base class for hash-streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hash-base@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/hash-base.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/hash-base",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/hash-base/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hash-base/-/hash-base-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d67998a7fae1303884ec06240f0fa52f0940cf3d009ed1887b9d45dd17c57c4ab24377de636788fcd7300baba621054e0123ccb1624b2527162924afccbf4854"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hash-base"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "3.6.0",
          "bom-ref": "hash-base@3.1.0|readable-stream@3.6.0",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@3.6.0",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "055887cbb2ca793cf8a0d9e470b27e95548beafa6215e5fafddde8487f33096ed4c4fda89dc864faf4c6075e37c6e1631d2ddd7938242a85d7ca65eaca688874"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/hash-base/node_modules/readable-stream"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.2.1",
          "bom-ref": "hash-base@3.1.0|safe-buffer@5.2.1",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.2.1",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/hash-base/node_modules/safe-buffer"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "ripemd160",
      "version": "2.0.2",
      "bom-ref": "ripemd160@2.0.2",
      "description": "Compute ripemd160 of bytes or strings.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ripemd160@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/ripemd160.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/ripemd160#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/ripemd160/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ripemd160/-/ripemd160-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8a2e226a08b6e56bac568882e01e25abba5b5df029dc3f6fe42c1f918df7bdf7f0dbea640e36350fc19a37bb29b31bc24b1f1d90fa8e642119c9fc5c9891b620"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ripemd160"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "sha.js",
      "version": "2.4.11",
      "bom-ref": "sha.js@2.4.11",
      "author": "Dominic Tarr",
      "description": "Streamable SHA hashes in pure javascript",
      "licenses": [
        {
          "expression": "(MIT AND BSD-3-Clause)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/sha.js@2.4.11",
      "externalReferences": [
        {
          "url": "git://github.com/crypto-browserify/sha.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/sha.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/sha.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "40c129e41edc7ed13b00f3a393963ac60adb5aef9690b550c24f0936367c9ca45c899681c845ba32e6e2780893a12efe770beb8c6847f23457cf7315774018a9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sha.js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "diffie-hellman",
      "version": "5.0.3",
      "bom-ref": "diffie-hellman@5.0.3",
      "author": "Calvin Metcalf",
      "description": "pure js diffie-hellman",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/diffie-hellman@5.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/diffie-hellman.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/diffie-hellman",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/diffie-hellman/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-5.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "92a6a0fcd97e7f71b0c8adb97e150c623f350543ab67d22e26c8c870313989c34cf452470159b755c503c5d2cfa10b53b94ca55a6e992249d8270c1a3f1b14ce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/diffie-hellman"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.0",
          "bom-ref": "diffie-hellman@5.0.3|bn.js@4.12.0",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "73df017f7b4f9e223eb1cb1d936dfb92ed43737ba35d04d283288f50310e7bbb51921aeaae276f87c92506fd07084b28d4e2ce61c1ee0affdc4ba0cdc4a1fe64"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/diffie-hellman/node_modules/bn.js"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "miller-rabin",
      "version": "4.0.1",
      "bom-ref": "miller-rabin@4.0.1",
      "author": "Fedor Indutny",
      "description": "Miller Rabin algorithm for primality test",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/miller-rabin@4.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/miller-rabin.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/miller-rabin",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/miller-rabin/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d75e5f2e1bd956a5b01cf6c29729edc4455f5437e5f432cb4ee26fab78363bf3b18bc022368b801ef0d2cc74b4be250973e579be6ddeabdd57c2a9fd769e2344"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/miller-rabin"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.0",
          "bom-ref": "miller-rabin@4.0.1|bn.js@4.12.0",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "73df017f7b4f9e223eb1cb1d936dfb92ed43737ba35d04d283288f50310e7bbb51921aeaae276f87c92506fd07084b28d4e2ce61c1ee0affdc4ba0cdc4a1fe64"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/miller-rabin/node_modules/bn.js"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "public-encrypt",
      "version": "4.0.3",
      "bom-ref": "public-encrypt@4.0.3",
      "author": "Calvin Metcalf",
      "description": "browserify version of publicEncrypt & privateDecrypt",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/public-encrypt@4.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/publicEncrypt.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/publicEncrypt",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/publicEncrypt/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-4.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cd5a5af282994b3e5b4cc4c50a57357d03a7cb2133a65e68ce98b507961cbc1adda213231f6adfb01b725dcb8dbb08ec0c85e6058945d8de45949621476f6df1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/public-encrypt"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.0",
          "bom-ref": "public-encrypt@4.0.3|bn.js@4.12.0",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "73df017f7b4f9e223eb1cb1d936dfb92ed43737ba35d04d283288f50310e7bbb51921aeaae276f87c92506fd07084b28d4e2ce61c1ee0affdc4ba0cdc4a1fe64"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/public-encrypt/node_modules/bn.js"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "randomfill",
      "version": "1.0.4",
      "bom-ref": "randomfill@1.0.4",
      "description": "random fill from browserify stand alone",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/randomfill@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/randomfill.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/randomfill",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/randomfill/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/randomfill/-/randomfill-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f3b95c6d1f3e321716714890fbd7be470c7c3324763fbaa7b75e729d495b9b74d4fdf8db833e06b2f7d25034de9ad082b550aa6f865c1059723cd4e1f5b0532f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/randomfill"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "deps-sort",
      "version": "2.0.1",
      "bom-ref": "deps-sort@2.0.1",
      "author": "James Halliday",
      "description": "sort module-deps output for deterministic browserify bundles",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/deps-sort@2.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/deps-sort.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/deps-sort",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/deps-sort/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/deps-sort/-/deps-sort-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d68aea5d0af9a68fb7288ea441bf40e239d74f53c1c2080697677b4aadb1b2739e23d18f704fed19c17d522499b5904ceccba463870087b31e992ead6588a97f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/deps-sort"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "shasum-object",
      "version": "1.0.0",
      "bom-ref": "shasum-object@1.0.0",
      "author": "Renée Kooi",
      "description": "get the shasum of a buffer or object",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shasum-object@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/goto-bus-stop/shasum-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/goto-bus-stop/shasum-object",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/goto-bus-stop/shasum-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shasum-object/-/shasum-object-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "22aa39ae9ff7c558ba33862179aa736618463d5b34c99c078fbc2fc10d41f73f07eb393e1449c8ef2dd37aaeeac277a47c486ef16986db3d33e225996b12d656"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shasum-object"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "subarg",
      "version": "1.0.0",
      "bom-ref": "subarg@1.0.0",
      "author": "James Halliday",
      "description": "parse arguments with recursive contexts",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/subarg@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/subarg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/subarg",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/subarg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/subarg/-/subarg-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f62cf17581e996b48fc965699f54c06ae268b8d2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/subarg"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "domain-browser",
      "version": "1.2.0",
      "bom-ref": "domain-browser@1.2.0",
      "author": "2013+ Bevry Pty Ltd",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/bevry/domain-browser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/bevry/domain-browser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bevry/domain-browser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8e78f288ce9e472665d87f96f10ff32cc038f358738b47accc06815332159e66150c16e72f154d9dfbb51e0101bc26cbfbbd45af1325dc4ea5a4a1fb19edce5c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/domain-browser"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "duplexer2",
      "version": "0.1.4",
      "bom-ref": "duplexer2@0.1.4",
      "author": "Conrad Pankoff",
      "description": "Like duplexer but using streams3",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/duplexer2@0.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/deoxxa/duplexer2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/deoxxa/duplexer2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/deoxxa/duplexer2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8b12dab878c0d69e3e7891051662a32fc6bddcc1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/duplexer2"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "events",
      "version": "3.3.0",
      "bom-ref": "events@3.3.0",
      "author": "Irakli Gozalishvili",
      "description": "Node's event emitter for all engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/events@3.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/Gozala/events.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Gozala/events#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/Gozala/events/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/events/-/events-3.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "990c3ed9f9106c02f343b574318d08a9d9d734e793b4fe2bd2537dcfb0006b009782a79aedb0e28b6d0062b201ac577f1f1d0cd8e733e92d75d4268591471bd1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/events"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "glob",
      "version": "7.2.0",
      "bom-ref": "glob@7.2.0",
      "author": "Isaac Z. Schlueter",
      "description": "a little globber",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/glob@7.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-glob#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9662dfea0b72acfabcb538d29ab3bde3005e41b151dc76cb1dbbb20faf70bb2424226a76856a8c181e3b397eb914190f7df3bae3520ff6359ad73e22bea1b6e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/glob"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs.realpath",
      "version": "1.0.0",
      "bom-ref": "fs.realpath@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/fs.realpath.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs.realpath"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "inflight",
      "version": "1.0.6",
      "bom-ref": "inflight@1.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/inflight.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inflight",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inflight/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inflight"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "once",
      "version": "1.4.0",
      "bom-ref": "once@1.4.0",
      "author": "Isaac Z. Schlueter",
      "description": "Run a function exactly one time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/once.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/once#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/once/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/once"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "wrappy",
      "version": "1.0.2",
      "bom-ref": "wrappy@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "Callback wrapping utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/wrappy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/wrappy",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/wrappy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrappy"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimatch",
      "version": "3.1.2",
      "bom-ref": "minimatch@3.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minimatch#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minimatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "brace-expansion",
      "version": "1.1.11",
      "bom-ref": "brace-expansion@1.1.11",
      "author": "Julian Gruber",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/brace-expansion"
        }
      ]
    },
    {
      "type": "library",
      "name": "balanced-match",
      "version": "1.0.0",
      "bom-ref": "balanced-match@1.0.0",
      "author": "Julian Gruber",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/balanced-match"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-map",
      "version": "0.0.1",
      "bom-ref": "concat-map@0.0.1",
      "author": "James Halliday",
      "description": "concatenative mapdashery",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-concat-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-concat-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-concat-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "bom-ref": "path-is-absolute@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-is-absolute.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-is-absolute"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "has",
      "version": "1.0.3",
      "bom-ref": "has@1.0.3",
      "author": "Thiago de Arruda",
      "description": "Object.prototype.hasOwnProperty.call shortcut",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        },
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/tarruda/has/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/tarruda/has.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tarruda/has",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tarruda/has/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "htmlescape",
      "version": "1.1.1",
      "bom-ref": "htmlescape@1.1.1",
      "author": "Andres Suarez",
      "description": "Properly escape JSON for usage as an object literal inside of a `<script>` tag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/htmlescape@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/zertosh/htmlescape.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zertosh/htmlescape",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zertosh/htmlescape/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/htmlescape/-/htmlescape-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a03edc2214bca3b66424a3e7959349509cb0351"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/htmlescape"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "https-browserify",
      "version": "1.0.0",
      "bom-ref": "https-browserify@1.0.0",
      "author": "James Halliday",
      "description": "https module compatability for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/https-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/https-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/https-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/https-browserify/-/https-browserify-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ec06c10e0a34c0f2faf199f7fd7fc78fffd03c73"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/https-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "insert-module-globals",
      "version": "7.2.1",
      "bom-ref": "insert-module-globals@7.2.1",
      "author": "James Halliday",
      "description": "insert implicit module globals into a module-deps stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/insert-module-globals@7.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/insert-module-globals.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/insert-module-globals",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/insert-module-globals/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/insert-module-globals/-/insert-module-globals-7.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b9f4b942af5164df81bbcf7d780f50080613858fa0196ee846499bd2f0bddd5972bbf08519c1f43983c48d59035c0e4511b4edd7e556cdda0e0f7372f4dfbcb6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/insert-module-globals"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn-node",
      "version": "1.8.2",
      "bom-ref": "acorn-node@1.8.2",
      "author": "Renée Kooi",
      "description": "the acorn javascript parser, preloaded with plugins for syntax parity with recent node versions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn-node@1.8.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserify/acorn-node.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/acorn-node",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/acorn-node/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn-node/-/acorn-node-1.8.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f26b7e7ec943b9f2d89ed2283c06883147bf96b6eb7a1222c26477b7693d2e58c8ce88a010f176ede2e4da1cbccd21b3991fe882bef36d128834ca35bb4ca1e4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn-node"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn-walk",
      "version": "7.2.0",
      "bom-ref": "acorn-walk@7.2.0",
      "description": "ECMAScript (ESTree) AST walker",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn-walk@7.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/acornjs/acorn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/acornjs/acorn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/acornjs/acorn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-7.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "38f74217a1ac3083fe033f9a59f000384b76ffe8950ca13ba32ea5274f7c6a87b9f680262bbeaa57a1b0eb449b67c8c7b86db01f4e7c185e292c56d86a662b54"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn-walk"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn",
      "version": "7.4.1",
      "bom-ref": "acorn@7.4.1",
      "description": "ECMAScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn@7.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/acornjs/acorn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/acornjs/acorn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/acornjs/acorn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9d0ca9d28d7f98d75b4ced4f3ba9079304ab9a0674313fe3082a4d8b06d48c6a11378765061a89b6842e0a710e2b3813570834656882a10cba4b131e6d0561f0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "xtend",
      "version": "4.0.2",
      "bom-ref": "xtend@4.0.2",
      "author": "Raynos",
      "description": "extend like a boss",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/Raynos/xtend.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/xtend",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/xtend/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/xtend"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-buffer",
      "version": "1.1.6",
      "bom-ref": "is-buffer@1.1.6",
      "author": "Feross Aboukhadijeh",
      "description": "Determine if an object is a Buffer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "url": "git://github.com/feross/is-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/is-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/is-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-buffer"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "process",
      "version": "0.11.10",
      "bom-ref": "process@0.11.10",
      "author": "Roman Shtylman",
      "description": "process information for node.js and browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "url": "git://github.com/shtylman/node-process.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shtylman/node-process#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shtylman/node-process/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7332300e840161bda3e69a1d1d91a7d4bc16f182"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/process"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "undeclared-identifiers",
      "version": "1.1.3",
      "bom-ref": "undeclared-identifiers@1.1.3",
      "author": "Renée Kooi",
      "description": "find undeclared identifiers and property accesses in a javascript file.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/undeclared-identifiers@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/goto-bus-stop/undeclared-identifiers.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/goto-bus-stop/undeclared-identifiers",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/goto-bus-stop/undeclared-identifiers/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/undeclared-identifiers/-/undeclared-identifiers-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a49396e27c639667f0280a44e33bf12d270cfe78e6c23fc389406fec469bc04e0ef24454cbe1c8c3142d64b04f965fe3c752c9c8172a35f077fdca6ff446703b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/undeclared-identifiers"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "dash-ast",
      "version": "1.0.0",
      "bom-ref": "dash-ast@1.0.0",
      "author": "Renée Kooi",
      "description": "walk an AST, quickly",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dash-ast@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/goto-bus-stop/dash-ast.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/goto-bus-stop/dash-ast",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/goto-bus-stop/dash-ast/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dash-ast/-/dash-ast-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "572e1dc7b82ab9378c71047f8439182c6527c158a5eaf93814e39cb7e7635271ce516b7ecc93c901a4485da00590f5ed263be563ba37adf46ed3fde1a67c2850"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dash-ast"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-assigned-identifiers",
      "version": "1.2.0",
      "bom-ref": "get-assigned-identifiers@1.2.0",
      "author": "Renée Kooi",
      "description": "get a list of identifiers that are initialised by a JavaScript AST node.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-assigned-identifiers@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/goto-bus-stop/get-assigned-identifiers.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/goto-bus-stop/get-assigned-identifiers",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/goto-bus-stop/get-assigned-identifiers/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-assigned-identifiers/-/get-assigned-identifiers-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "98107099e193af110c3b8a4c69a7ffb941051e762dc2bf054def18fe67abe2b715fdbc9ed2a1a6ea9c356c6645192b710b93bbe9ce590150469ea1e639a26975"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-assigned-identifiers"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "simple-concat",
      "version": "1.0.1",
      "bom-ref": "simple-concat@1.0.1",
      "author": "Feross Aboukhadijeh",
      "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/simple-concat@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/simple-concat.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/simple-concat",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/simple-concat/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "71216d00fb518658efebd20ad214d5650f8e7c4f6778f8bfaed266c395231de57256ba04a895cfd6c173b4a532d6a53ec6fcf7bbfb1f6092daf78edbee700dd9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/simple-concat"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonparse",
      "version": "1.3.1",
      "bom-ref": "jsonparse@1.3.1",
      "author": "Tim Caswell",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/creationix/jsonparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/creationix/jsonparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/creationix/jsonparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f4dae4a91fac315f71062f8521cc239f1366280"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonparse"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "through",
      "version": "2.3.8",
      "bom-ref": "through@2.3.8",
      "author": "Dominic Tarr",
      "description": "simplified stream construction",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/dominictarr/through.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dominictarr/through",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/through/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "labeled-stream-splicer",
      "version": "2.0.2",
      "bom-ref": "labeled-stream-splicer@2.0.2",
      "author": "James Halliday",
      "description": "stream splicer with labels",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/labeled-stream-splicer@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/labeled-stream-splicer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/labeled-stream-splicer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/labeled-stream-splicer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/labeled-stream-splicer/-/labeled-stream-splicer-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "09ae0b4971456548cf49c45aa8e705c67780d15a4a66be0c3180a58f242be0b21ec132dbdd8d0851322c9c106c56e6c87847f17926694a34ac44cf003c441a03"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/labeled-stream-splicer"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-splicer",
      "version": "2.0.1",
      "bom-ref": "stream-splicer@2.0.1",
      "author": "James Halliday",
      "description": "streaming pipeline with a mutable configuration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-splicer@2.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/stream-splicer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/stream-splicer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/stream-splicer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-splicer/-/stream-splicer-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e2ce1e3f34fb984b2017c93ee0f08bdd27d1c9a712062fd3e3ca1b72c0266fbcfd0e3c876acabaf874c8a47aebd8f316a1a5d284065053c927b9f37b68b5a8e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-splicer"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "mkdirp-classic",
      "version": "0.5.3",
      "bom-ref": "mkdirp-classic@0.5.3",
      "author": "Mathias Buus",
      "description": "Mirror of mkdirp 0.5.2",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mkdirp-classic@0.5.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/mkdirp-classic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/mkdirp-classic",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/mkdirp-classic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "80a2dc444321b6e651c1101fa8fdd1156f932b826a029541b4e21fb55823b8006902da7184f19a0dc7ef6e136f0f407c883d6852bfedc57df936371a63a36cfc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mkdirp-classic"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "module-deps",
      "version": "6.2.3",
      "bom-ref": "module-deps@6.2.3",
      "author": "James Halliday",
      "description": "walk the dependency graph to generate json output that can be fed into browser-pack",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/module-deps@6.2.3",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/module-deps.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/module-deps",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/module-deps/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/module-deps/-/module-deps-6.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7e0ece65a40170be3f2fe00ae5fe2256a7fd38c6c27255dfcbfce75d1c53561252796e402254bd03085e6300da5ccde5556ece05e69e50463781b682e9c2e548"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/module-deps"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "detective",
      "version": "5.2.0",
      "bom-ref": "detective@5.2.0",
      "author": "James Halliday",
      "description": "find all require() calls by walking the AST",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/detective@5.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/detective.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/detective#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/detective/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/detective/-/detective-5.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e92b08c7e9d451bb8ad04b612a3bf4ceb7676a30825d560699b6188988c5569cdc8f012cfc930367cb4f446dbd27f1e1379eaddc6269d9c1925834638e8b7c3e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/detective"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimist",
      "version": "1.2.6",
      "bom-ref": "minimist@1.2.6",
      "author": "James Halliday",
      "description": "parse argument options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.6",
      "externalReferences": [
        {
          "url": "git://github.com/substack/minimist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/minimist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/minimist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "26c8e79386f0dd826a6336ddc8188db0f5873df3bef94186ef8f42c6cea9782bb95e0e27ade9dae8e571398c6b413ab0c34266c2df9179ff2b820ba69132f3f5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimist"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "parents",
      "version": "1.0.1",
      "bom-ref": "parents@1.0.1",
      "author": "James Halliday",
      "description": "return all the parent directories for a directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parents@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-parents.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-parents",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-parents/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parents/-/parents-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fedd4d2bf193a77745fe71e371d73c3307d9c751"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parents"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-combiner2",
      "version": "1.1.1",
      "bom-ref": "stream-combiner2@1.1.1",
      "author": "'Dominic Tarr'",
      "description": "This is a sequel to [stream-combiner](https://npmjs.org/package/stream-combiner) for streams3.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/stream-combiner2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/stream-combiner2",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/stream-combiner2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fb4d8a1420ea362764e21ad4780397bebcb41cbe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-combiner2"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "os-browserify",
      "version": "0.3.0",
      "bom-ref": "os-browserify@0.3.0",
      "author": "CoderPuppy",
      "description": "The [os](https://nodejs.org/api/os.html) module from node.js, but for browsers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.3.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/CoderPuppy/os-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/CoderPuppy/os-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/CoderPuppy/os-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "854373c7f5c2315914fc9bfc6bd8238fdda1ec27"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/os-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-platform",
      "version": "0.11.15",
      "bom-ref": "path-platform@0.11.15",
      "author": "Timothy J Fontaine",
      "description": "Provide access to win32 and posix path operations; sourced directly from upstream Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-platform@0.11.15",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/tjfontaine/node-path-platform.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/tjfontaine/node-path-platform",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/tjfontaine/node-path-platform/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-platform/-/path-platform-0.11.15.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e864217f74c36850f0852b78dc7bf7d4a5721bf2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-platform"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-browserify",
      "version": "1.0.1",
      "bom-ref": "path-browserify@1.0.1",
      "author": "James Halliday",
      "description": "the path module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/path-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/path-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/path-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-browserify/-/path-browserify-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6fbba8d9409439865c9c5ff7203d25ba53898bf6da7f16b5c4f7bb64fb1a9a6052a634964248cdc65b7adf96064b632247d1a3bee5c2b73d9e9abde36eccfdf2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "punycode",
      "version": "1.4.1",
      "bom-ref": "punycode@1.4.1",
      "author": "Mathias Bynens",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/bestiejs/punycode.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/punycode",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bestiejs/punycode.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/punycode"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "querystring-es3",
      "version": "0.2.1",
      "bom-ref": "querystring-es3@0.2.1",
      "author": "Irakli Gozalishvili",
      "description": "Node's querystring module for all engines. (ES3 compat fork)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/Gozala/enchain/License.md"
          }
        }
      ],
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/mike-spainhower/querystring.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mike-spainhower/querystring#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/mike-spainhower/querystring/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9ec61f79049875707d69414596fd907a4d711e73"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/querystring-es3"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "read-only-stream",
      "version": "2.0.0",
      "bom-ref": "read-only-stream@2.0.0",
      "author": "James Halliday",
      "description": "wrap a readable/writable stream to be read-only",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-only-stream@2.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/read-only-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/read-only-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/read-only-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-only-stream/-/read-only-stream-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2724fd6a8113d73764ac288d4386270c1dbf17f0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-only-stream"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "core-util-is",
      "version": "1.0.2",
      "bom-ref": "core-util-is@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/core-util-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/core-util-is"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "isarray",
      "version": "1.0.0",
      "bom-ref": "isarray@1.0.0",
      "author": "Julian Gruber",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/isarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/isarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/isarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bb935d48582cba168c06834957a54a3e07124f11"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isarray"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "bom-ref": "process-nextick-args@2.0.1",
      "description": "process.nextTick but always with args",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/process-nextick-args"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-core-module",
      "version": "2.4.0",
      "bom-ref": "is-core-module@2.4.0",
      "author": "Jordan Harband",
      "description": "Is this specifier a node.js core module?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-core-module@2.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-core-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-core-module",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-core-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e80d9f91fab5adf790663c6b64919eae92c24c744d101892827bb4fa86de26910f651528a0782c8b3bf3bf46632703b3de25881dd26d55627fb663ebdc3db5fc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-core-module"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-parse",
      "version": "1.0.7",
      "bom-ref": "path-parse@1.0.7",
      "author": "Javier Blanco",
      "description": "Node.js path.parse() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/jbgutierrez/path-parse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-parse"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "fast-safe-stringify",
      "version": "2.0.7",
      "bom-ref": "fast-safe-stringify@2.0.7",
      "author": "David Mark Clements",
      "description": "Safely and quickly serialize JavaScript objects",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fast-safe-stringify@2.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidmarkclements/fast-safe-stringify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davidmarkclements/fast-safe-stringify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/davidmarkclements/fast-safe-stringify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fast-safe-stringify/-/fast-safe-stringify-2.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "52d9ba09dcd3fbac6c0e4da6f12eae2fc547c4dc08e89b9bf9ef4d6137009acdbc4fce294dadb9189415f63d02634375accf212b8c7a82ba45d8141ffb6ab054"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fast-safe-stringify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "shell-quote",
      "version": "1.7.3",
      "bom-ref": "shell-quote@1.7.3",
      "author": "James Halliday",
      "description": "quote and parse shell commands",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shell-quote@1.7.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-shell-quote.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-shell-quote",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-shell-quote/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.7.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5697eac26e049ea19d96c0453661e1c61125258add7dcc4f4e1bbeaf2292e49f0bfdf840c0b6b3159b6af92f93599f40363da989240b1a3e8d420fa528f9b1af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shell-quote"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-browserify",
      "version": "3.0.0",
      "bom-ref": "stream-browserify@3.0.0",
      "author": "James Halliday",
      "description": "the stream module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-browserify@3.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/stream-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/stream-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/stream-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1fbdd1007b1505aa5b8a6d2d536270c0e897523f9f8a47e26a86002871775497c0d297b6042ce48401c194b1ba444cc4fb658d65cc4e5e32bb964b28fbd7ae2c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "3.6.0",
          "bom-ref": "stream-browserify@3.0.0|readable-stream@3.6.0",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@3.6.0",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "055887cbb2ca793cf8a0d9e470b27e95548beafa6215e5fafddde8487f33096ed4c4fda89dc864faf4c6075e37c6e1631d2ddd7938242a85d7ca65eaca688874"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stream-browserify/node_modules/readable-stream"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-http",
      "version": "3.2.0",
      "bom-ref": "stream-http@3.2.0",
      "author": "John Hiesey",
      "description": "Streaming http in the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-http@3.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/jhiesey/stream-http.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jhiesey/stream-http#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jhiesey/stream-http/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-http/-/stream-http-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3aad5b2ea8ac4f22b74d2097a4f6d3e2c75e60d766c9926fd4bc69126dafbb56612bcf64484e585f065cddc5a4d0c6a019a2ab88187d98215b546b4efaf636f4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-http"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "3.6.0",
          "bom-ref": "stream-http@3.2.0|readable-stream@3.6.0",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@3.6.0",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "055887cbb2ca793cf8a0d9e470b27e95548beafa6215e5fafddde8487f33096ed4c4fda89dc864faf4c6075e37c6e1631d2ddd7938242a85d7ca65eaca688874"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stream-http/node_modules/readable-stream"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "builtin-status-codes",
      "version": "3.0.0",
      "bom-ref": "builtin-status-codes@3.0.0",
      "author": "Ben Drucker",
      "description": "The map of HTTP status codes from the builtin http module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/builtin-status-codes@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/bendrucker/builtin-status-codes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/bendrucker/builtin-status-codes#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bendrucker/builtin-status-codes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/builtin-status-codes/-/builtin-status-codes-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "85982878e21b98e1c66425e03d0174788f569ee8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/builtin-status-codes"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "syntax-error",
      "version": "1.4.0",
      "bom-ref": "syntax-error@1.4.0",
      "author": "James Halliday",
      "description": "detect and report syntax errors in source code strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/syntax-error@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-syntax-error.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-syntax-error",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-syntax-error/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/syntax-error/-/syntax-error-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "60f3e5bbaee67671c64eea7603c7dfec10b63e3ab47b4629fc8c9314dd37cd63b445c2b4eee2dc6e2ec2d8aa4647616f59b681d3e6df136edafac04a79b4a8ef"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/syntax-error"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "timers-browserify",
      "version": "1.4.2",
      "bom-ref": "timers-browserify@1.4.2",
      "author": "J. Ryan Stinnett",
      "description": "timers module for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/jryans/timers-browserify/blob/master/LICENSE.md"
          }
        }
      ],
      "purl": "pkg:npm/timers-browserify@1.4.2",
      "externalReferences": [
        {
          "url": "git://github.com/jryans/timers-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jryans/timers-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jryans/timers-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-1.4.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c9c58b575be8407375cb5e2462dacee74359f41d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/timers-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "tty-browserify",
      "version": "0.0.1",
      "bom-ref": "tty-browserify@0.0.1",
      "author": "James Halliday",
      "description": "the tty module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/tty-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/tty-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/tty-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0b74da3bb2bcd58be30a0407f50d52dd1dcfdc1b4ddd120cf27f8ebd7e229752b5ce013c661234a29ee40a5824c6dbad204f2142b72b1c15ef2217aa294502c7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tty-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "url",
      "version": "0.11.0",
      "bom-ref": "url@0.11.0",
      "description": "The core `url` packaged standalone for use with Browserify.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/url@0.11.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/defunctzombie/node-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/defunctzombie/node-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/defunctzombie/node-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/url/-/url-0.11.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3838e97cfc60521eb73c525a8e55bfdd9e2e28f1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/url"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "punycode",
          "version": "1.3.2",
          "bom-ref": "url@0.11.0|punycode@1.3.2",
          "author": "Mathias Bynens",
          "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/punycode@1.3.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/bestiejs/punycode.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://mths.be/punycode",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bestiejs/punycode.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "9653a036fb7c1ee42342f2325cceefea3926c48d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/url/node_modules/punycode"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "querystring",
      "version": "0.2.0",
      "bom-ref": "querystring@0.2.0",
      "author": "Irakli Gozalishvili",
      "description": "Node's querystring module for all engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/Gozala/enchain/License.md"
          }
        }
      ],
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/Gozala/querystring.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Gozala/querystring#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/Gozala/querystring/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b209849203bb25df820da756e747005878521620"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/querystring"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "util",
      "version": "0.12.3",
      "bom-ref": "util@0.12.3",
      "author": "Joyent",
      "description": "Node.js's util module for all engines",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util@0.12.3",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/node-util.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/node-util",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/node-util/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util/-/util-0.12.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "23c5e4a10c04f9f3d0121cbdbf4d7657e4d2747da4a7db6cdbd8b6d1369a0d45ec83bc7fa2778f6e1149504c417efff66b2d593a9fd5b26de70e59a7146480a2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-arguments",
      "version": "1.1.0",
      "bom-ref": "is-arguments@1.1.0",
      "author": "Jordan Harband",
      "description": "Is this an arguments object? It's a harder question than you think.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-arguments@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-arguments.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-arguments",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-arguments/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d488f894e30f97fc41e640439fb23e6f6b6d3cc29af2cce1108ad70ee5d00ffa1edc724b4cb86a8601aca7083219de8c3b2c0152a56f622705ef69648039c81e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-arguments"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-generator-function",
      "version": "1.0.9",
      "bom-ref": "is-generator-function@1.0.9",
      "author": "Jordan Harband",
      "description": "Determine if a function is a native generator function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-generator-function@1.0.9",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-generator-function.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-generator-function#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-generator-function/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.0.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "649df8a75baf21fa6d1c237bb054e31a26c1f7fa01835eec1eacc32dfbb086f98dfea2d5bc8417450f2589c650df9589f0ab8442dfdeb679f340523d0bd51efc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-generator-function"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-typed-array",
      "version": "1.1.5",
      "bom-ref": "is-typed-array@1.1.5",
      "author": "Jordan Harband",
      "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.5",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-typed-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-typed-array#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-typed-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4be1910e02654773f211bb17fc5a1b77d72aa5906ebd44bef1ab11a980cc2c26f6a8ccedd68cf99b9a31402c4e8140f1896b0e54d8b8c9a17efeebdd947958ba"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-typed-array"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "available-typed-arrays",
      "version": "1.0.3",
      "bom-ref": "available-typed-arrays@1.0.3",
      "author": "Jordan Harband",
      "description": "Returns an array of Typed Array names that are available in the current environment",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/available-typed-arrays.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/available-typed-arrays#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/available-typed-arrays/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0ae3e11542e2c55fddf3d3cea35506e06a866d1edd9ab79f63665d9ac61a91e47880e4895e817bb5f79a8aa30718e32b953889a1e12cf3b7e92ec058984d8133"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/available-typed-arrays"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "array.prototype.filter",
      "version": "1.0.0",
      "bom-ref": "array.prototype.filter@1.0.0",
      "author": "Jordan Harband",
      "description": "An ES5 spec-compliant `Array.prototype.filter` shim/polyfill/replacement that works as far down as ES3.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array.prototype.filter@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/Array.prototype.filter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/Array.prototype.filter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/Array.prototype.filter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array.prototype.filter/-/array.prototype.filter-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4df3b5833fad2e6f81b30ab41413973ea01c86d0abd919f8f13f1d2c9a11165f0da04a2c8d99b3a6d9aea355fc69907365caac4755bc53beb5b6300226d9e04d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array.prototype.filter"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "define-properties",
      "version": "1.1.3",
      "bom-ref": "define-properties@1.1.3",
      "author": "Jordan Harband",
      "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/define-properties.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/define-properties#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/define-properties/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dcca9f60a8f694bcdd3127fc648644fd5f99bb2f81803e9fd7ae1ef0adb0edd827a4a02b0437ab198a4ce3a21861c8e791d3cd3233e4f40e95141f3edd22a55d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/define-properties"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "object-keys",
      "version": "1.1.1",
      "bom-ref": "object-keys@1.1.1",
      "author": "Jordan Harband",
      "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/object-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/object-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/object-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-keys"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-abstract",
      "version": "1.18.0",
      "bom-ref": "es-abstract@1.18.0",
      "author": "Jordan Harband",
      "description": "ECMAScript spec abstract operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-abstract@1.18.0",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/es-abstract.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-abstract#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-abstract/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.18.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2c9ccaeccad06bc4d2d236b6c3760d2f352024218f74f395d7256f7b38cd9d2f3d0fe551d3cf92cedda6cf7601d83724ffec39b5f22afd1a14005a89246336cb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-abstract"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-array-method-boxes-properly",
      "version": "1.0.0",
      "bom-ref": "es-array-method-boxes-properly@1.0.0",
      "author": "Jordan Harband",
      "description": "Utility package to determine if an `Array.prototype` method properly boxes the callback's receiver and third argument.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-array-method-boxes-properly@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-array-method-boxes-properly.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-array-method-boxes-properly#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-array-method-boxes-properly/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-array-method-boxes-properly/-/es-array-method-boxes-properly-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c1de895d49b21e6b7c4f96b6c6b794c0a7063eae9fd5ff96c082648a352a886709cf5aaa9d980fe9720af90c88594e654fb8a678dc54965e3c6f3886f9349870"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-array-method-boxes-properly"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-string",
      "version": "1.0.6",
      "bom-ref": "is-string@1.0.6",
      "author": "Jordan Harband",
      "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-string@1.0.6",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/is-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/is-string#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/is-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-string/-/is-string-1.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "da07736ca52eaad43795836b513418a0294f866ee842ee14769499329d7f0c68241c14fc136675974c8c75be83e33340c700e232ff0c76e94a44e246365d10d3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-string"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-to-primitive",
      "version": "1.2.1",
      "bom-ref": "es-to-primitive@1.2.1",
      "author": "Jordan Harband",
      "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/es-to-primitive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-to-primitive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-to-primitive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4023a5960649b5a528f6689805c2c285351a1cd8c91773d8b35562743ec0c22123d6463129e41372d2c07b300e1f964a447d20d8880f9fa2b0078213f22469bc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-to-primitive"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-callable",
      "version": "1.2.3",
      "bom-ref": "is-callable@1.2.3",
      "author": "Jordan Harband",
      "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.3",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/is-callable.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/is-callable#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/is-callable/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2750dc31ef14613052aca7b3b885135308d7b21a36f7af77ba75ccd98849513476b712bf786e3b6ef35aff08a93c5999160aff37a7f5180eba76fd261324c8c9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-callable"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-date-object",
      "version": "1.0.4",
      "bom-ref": "is-date-object@1.0.4",
      "author": "Jordan Harband",
      "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-date-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-date-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-date-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fdbe1956c1bb6795d5b48c6cfe1f56f27bdf2e0480c8a61db465902dbab2ea303589c9a08dff160a84ca81e4b8c32e6d61a3de3e8bb314c00d6e78fde1cd99f8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-date-object"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-symbol",
      "version": "1.0.4",
      "bom-ref": "is-symbol@1.0.4",
      "author": "Jordan Harband",
      "description": "Determine if a value is an ES6 Symbol or not.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-symbol.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-symbol#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-symbol/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0bf08f06a2969ef75cc6a200471c8e878bf551410e087a600dad16620a4a0c532ccdcacf71f7e0e6e8704a03c22c3d965b19aaea2b22b33f3bb734f4d6db8686"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-symbol"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-negative-zero",
      "version": "2.0.1",
      "bom-ref": "is-negative-zero@2.0.1",
      "author": "Jordan Harband",
      "description": "Is this value negative zero? === will lie to you",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-negative-zero@2.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-negative-zero.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-negative-zero",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-negative-zero/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-negative-zero/-/is-negative-zero-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "db3e89cd0bd945af40d98ef10ba750426e054934933568ca218613b78db8e9e313266228d10f99c8eb14eba5fc9712b501b07dd9d15e8253cbae1c2979128eeb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-negative-zero"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-regex",
      "version": "1.1.3",
      "bom-ref": "is-regex@1.1.3",
      "author": "Jordan Harband",
      "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-regex@1.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-regex",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a92557173dbc1ccef2f88597eaf2c2b1ec5d96fcd3d4f24d15206e6902d0e68d08130f140d85baff6f9e08c57222c6ccf0234b5f66bf416992a72c5810763b09"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-regex"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "object.assign",
      "version": "4.1.2",
      "bom-ref": "object.assign@4.1.2",
      "author": "Jordan Harband",
      "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/object.assign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/object.assign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/object.assign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8b14f62f94c75ec029ca250f60a996fb6107a575dee488b733e7f87be6891401daa396a61515ba27438ee9cfcb53c05ee3bbad0b1d862fcf61c4607a5d298ab9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object.assign"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "string.prototype.trimend",
      "version": "1.0.4",
      "bom-ref": "string.prototype.trimend@1.0.4",
      "author": "Jordan Harband",
      "description": "ES2019 spec-compliant String.prototype.trimEnd shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimend@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/String.prototype.trimEnd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimEnd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimEnd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cbdc428f0d4fdb703093c12f4e97322f6348af58fbc09dfd7fe93a96f46748ccfe9b3f421b3f4d60f7a50e4e3690ecfafaa97cc637caf28633cb78c03f9414e4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string.prototype.trimend"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "string.prototype.trimstart",
      "version": "1.0.4",
      "bom-ref": "string.prototype.trimstart@1.0.4",
      "author": "Jordan Harband",
      "description": "ES2019 spec-compliant String.prototype.trimStart shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimstart@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/String.prototype.trimStart.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimStart#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimStart/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8e1e9ef7ce0e05fbf14b9d2d758da74599e80b9fe62c528e44441fc3cb79cb2b64a14b0944dc6f23f137f6abb5b03d0eb56237382d1780a4a6716c338b062e67"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string.prototype.trimstart"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "unbox-primitive",
      "version": "1.0.1",
      "bom-ref": "unbox-primitive@1.0.1",
      "author": "Jordan Harband",
      "description": "Unbox a boxed JS primitive value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/unbox-primitive@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/unbox-primitive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/unbox-primitive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/unbox-primitive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b5953fdcda8addd0398291352adca2254ac40749719c690c147a6d27baba7b0759f2cd7642b383c0d6e12094ad98991dd500d76b535103c685d80d7393f629cb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/unbox-primitive"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-bigints",
      "version": "1.0.1",
      "bom-ref": "has-bigints@1.0.1",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has BigInt support.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-bigints@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/has-bigints.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/has-bigints#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/has-bigints/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-bigints/-/has-bigints-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2d2052d8b8db3414dfeb6f3b2446c4cef2607ed905e6a164982a3d8434690332a150e949fa1c7c75de144acd344a0b14370738eb5ec9f648b962d10294cd9f7c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-bigints"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-boxed-primitive",
      "version": "1.0.2",
      "bom-ref": "which-boxed-primitive@1.0.2",
      "author": "Jordan Harband",
      "description": "Which kind of boxed JS primitive is this?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-boxed-primitive@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/which-boxed-primitive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/which-boxed-primitive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/which-boxed-primitive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6f065dbf400a2e9a65158d8a6515fa4efcae37ba238ebee5c2483a9a5d2ba08cbd61eb92afb252dfbdaa94d5b5f14418ce060af7388671ead6a993a6127f5536"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-boxed-primitive"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-bigint",
      "version": "1.0.2",
      "bom-ref": "is-bigint@1.0.2",
      "author": "Jordan Harband",
      "description": "Is this value an ES BigInt?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-bigint@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-bigint.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-bigint#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-bigint/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d09579f9238242421dce304af5bb8045c57cd380ddbbb03441eb7ab078b7162984f677ba9b80464197d19fe3598976c19381785e61df0d9222a4b8fda57f1d48"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-bigint"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-boolean-object",
      "version": "1.1.1",
      "bom-ref": "is-boolean-object@1.1.1",
      "author": "Jordan Harband",
      "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-boolean-object@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-boolean-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-boolean-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-boolean-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6d77505a410205420070291e1f5ba7c092c8a5961a6b956fbb2812c92fdcda57fbd7d9932990d4e54743465a5dd355230038265bc45fa9a3fe9916953ddaff36"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-boolean-object"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-number-object",
      "version": "1.0.5",
      "bom-ref": "is-number-object@1.0.5",
      "author": "Jordan Harband",
      "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-number-object@1.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-number-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-number-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-number-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "454d2523f9fde6932850abbdbf50593f9301719b8d495264324006d9d26a0b8cf61a590650d787ebc4ae1ee04a043fd715ef8b1d9f9ff412a42c44fad0d89e77"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-number-object"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "foreach",
      "version": "2.0.5",
      "bom-ref": "foreach@2.0.5",
      "author": "Manuel Stofer",
      "description": "foreach component + npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/foreach@2.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/manuelstofer/foreach.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/manuelstofer/foreach#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/manuelstofer/foreach/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/foreach/-/foreach-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0bee005018aeb260d0a3af3ae658dd0136ec1b99"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/foreach"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-typed-array",
      "version": "1.1.4",
      "bom-ref": "which-typed-array@1.1.4",
      "author": "Jordan Harband",
      "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/which-typed-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/which-typed-array#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/which-typed-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e3d1344a951ef74723a6873b04e270c8f1d1a9201dd76735d109b66a674466b24f098d8d0f1696d35cc7213ade9beae7113637770adb1f7514ad4c1a81f0980c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-typed-array"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "vm-browserify",
      "version": "1.1.2",
      "bom-ref": "vm-browserify@1.1.2",
      "author": "James Halliday",
      "description": "vm module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@1.1.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/vm-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/vm-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/vm-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "da16a6f173d64ce35a8ce474a2138a3875e49b7fa0681986baddd246ebbbe712ddfd145a63abea821f0d058624efe456deee40b733d0646f05d742c7925d2501"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/vm-browserify"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "chai",
      "version": "4.5.0",
      "bom-ref": "chai@4.5.0",
      "author": "Jake Luer",
      "description": "BDD/TDD assertion library for node.js and the browser. Test framework agnostic.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chai@4.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chaijs/chai.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://chaijs.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/chai/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chai/-/chai-4.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4484c605f8a32e405d759be79fc8ddaa84f2a71bea6ce2d8424186c57cde163547bee75a3f0d073450fdc7ddbcfde53061677674f0ae815aaca4600b4d96502b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chai"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "assertion-error",
      "version": "1.1.0",
      "bom-ref": "assertion-error@1.1.0",
      "author": "Jake Luer",
      "description": "Error constructor for test and validation frameworks that implements standardized AssertionError specification.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/assertion-error@1.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/assertion-error.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chaijs/assertion-error#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/assertion-error/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8e0b1a35dbb3fa776f1b216ddee4ae5aabf2e250a72098a8beda2e40de4964738a092d90ba111d6dc407161564b33d8dd94f615c9a3ca1d1bb113c969447ae0f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/assertion-error"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "check-error",
      "version": "1.0.3",
      "bom-ref": "check-error@1.0.3",
      "author": "Jake Luer",
      "description": "Error comparison and information related utility for node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/check-error@1.0.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/check-error.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chaijs/check-error#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/check-error/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/check-error/-/check-error-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "88a1280d869199dd66c4cf746b63847d6863b233e960fb90fa5318b28c41d76ebeb7c7f0ef24843b8f2798383908e4e3c4323ae7f636396a5e10793764e7bcce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/check-error"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-func-name",
      "version": "2.0.2",
      "bom-ref": "get-func-name@2.0.2",
      "author": "Jake Luer",
      "description": "Utility for getting a function's name for node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-func-name@2.0.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/get-func-name.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chaijs/get-func-name#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/get-func-name/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f2f5cebee135ebb0ad21cdcec88b5ca3b37f76946d05b60eb0fb170b3ed7fcf3279468d88d21ae64980cd58ee699ec3b04a7fd06abcb5f6b67395cb504152cc5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-func-name"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "deep-eql",
      "version": "4.1.4",
      "bom-ref": "deep-eql@4.1.4",
      "author": "Jake Luer",
      "description": "Improved deep equality testing for Node.js and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/deep-eql@4.1.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/deep-eql.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chaijs/deep-eql#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/deep-eql/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/deep-eql/-/deep-eql-4.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "494c1d19fa9d28ec3108f795623c12c91a49ed9f9f869c0802d98251d648599fd83f947d580b32b928292d50e2f5b8d6a0dd8b5c736cb3f764deead7b5d4311a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/deep-eql"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "type-detect",
      "version": "4.1.0",
      "bom-ref": "type-detect@4.1.0",
      "author": "Jake Luer",
      "description": "Improved typeof detection for node.js and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/type-detect@4.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/type-detect.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chaijs/type-detect#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/type-detect/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "01cca5a20f3f96e43c2fb8a5fa07a84b184491acef92c960ecf48d28e5f9f666c1f5c3af78fe5aabd87be18ed853cc83a49c1eb73410adf230b5fe16a782ca73"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type-detect"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "loupe",
      "version": "2.3.7",
      "bom-ref": "loupe@2.3.7",
      "author": "Veselin Todorov",
      "description": "Inspect utility for Node.js and browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/loupe@2.3.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/chaijs/loupe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chaijs/loupe",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/loupe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/loupe/-/loupe-2.3.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cd230834655891da5848e0662e2d03d54a3b254f6755d40aac7c42f1e62557ef5828af5678fa8094bee54a5a2b1bf536170d70d214c199a6bf8eb43751b3c7b4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/loupe"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "pathval",
      "version": "1.1.1",
      "bom-ref": "pathval@1.1.1",
      "author": "Veselin Todorov",
      "description": "Object value retrieval given a string path",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pathval@1.1.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/chaijs/pathval.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chaijs/pathval",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chaijs/pathval/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pathval/-/pathval-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0e9eb31aaa537444dd47ade57a12583de20eaa988d04db5cec1a5648bace8deed4688b04e5a63ddabfc0ba7400eebb17bdeb7796b277267657dbd50f4ca5f229"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pathval"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "clipboard",
      "version": "2.0.11",
      "bom-ref": "clipboard@2.0.11",
      "description": "Modern copy to clipboard. No Flash. Just 2kb",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/clipboard@2.0.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/zenorocha/clipboard.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://clipboardjs.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zenorocha/clipboard.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/clipboard/-/clipboard-2.0.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0bed1b6ceaa47b32c8b26592be5b174b44346e692e82eee371f30800207e443127b48cd022476bd78f307b6f007d296840b45d66560bfd0632aead398ffdc56b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/clipboard"
        }
      ]
    },
    {
      "type": "library",
      "name": "good-listener",
      "version": "1.2.2",
      "bom-ref": "good-listener@1.2.2",
      "description": "A more versatile way of adding & removing event listeners",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/good-listener@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/zenorocha/good-listener.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zenorocha/good-listener#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zenorocha/good-listener/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/good-listener/-/good-listener-1.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d53b30cdf9313dffb7dc9a0d477096aa6d145c50"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/good-listener"
        }
      ]
    },
    {
      "type": "library",
      "name": "delegate",
      "version": "3.2.0",
      "bom-ref": "delegate@3.2.0",
      "description": "Lightweight event delegation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/delegate@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/zenorocha/delegate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zenorocha/delegate#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zenorocha/delegate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/delegate/-/delegate-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2287e39180596998af9f457c9e7b0c24606be2354bc470e178a496f3c3f2c52e500b8568f596d956f873952c58f3b7d5ab749347aafee1c19ea721e47163904b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/delegate"
        }
      ]
    },
    {
      "type": "library",
      "name": "select",
      "version": "1.1.2",
      "bom-ref": "select@1.1.2",
      "description": "Programmatically select the text of a HTML element",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/select@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/zenorocha/select.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zenorocha/select#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zenorocha/select/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/select/-/select-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0e7350acdec80b1108528786ec1d4418d11b396d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/select"
        }
      ]
    },
    {
      "type": "library",
      "name": "tiny-emitter",
      "version": "2.1.0",
      "bom-ref": "tiny-emitter@2.1.0",
      "author": "Scott Corgan",
      "description": "A tiny (less than 1k) event emitter library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tiny-emitter@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/scottcorgan/tiny-emitter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/scottcorgan/tiny-emitter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/scottcorgan/tiny-emitter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tiny-emitter/-/tiny-emitter-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "341e8393503dc6040f3281aa0b90955e7d76de05b2b5edb5e4e353e4fa796b4cade27944a0ed5959e0b0a6771a7a43c75ceeb48b8ee28459d93e244f8d132ae1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tiny-emitter"
        }
      ]
    },
    {
      "type": "library",
      "name": "cmdparser",
      "version": "0.1.0",
      "bom-ref": "cmdparser@0.1.0",
      "author": "Joe Ferner",
      "description": "Command parser with support for completers.",
      "purl": "pkg:npm/cmdparser@0.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/nearinfinity/node-cmdparser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nearinfinity/node-cmdparser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nearinfinity/node-cmdparser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cmdparser/-/cmdparser-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "63b20603905fea3c3eb8a5d7da68656669e37d09b24abd1866dba19f85bc0e05527a70255e940368a538e77dcb59ae3bc0b66ed6eb4669f6923c01c2bc81f6e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cmdparser"
        }
      ]
    },
    {
      "type": "library",
      "name": "config",
      "version": "3.3.12",
      "bom-ref": "config@3.3.12",
      "author": "Loren West",
      "description": "Configuration control for production node deployments",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/config@3.3.12",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/node-config/node-config.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/node-config/node-config.git",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/node-config/node-config/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/config/-/config-3.3.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "566c77f3d47f4153377e8c6a0735cef2ddad52291864feb843abd0c46aec32944478973f6964673d11115d6b18cce1c0ba6c7f00ea082d67ba9d4dd924bfba4b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/config"
        }
      ]
    },
    {
      "type": "library",
      "name": "json5",
      "version": "2.2.3",
      "bom-ref": "json5@2.2.3",
      "author": "Aseem Kishore",
      "description": "JSON for Humans",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json5@2.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/json5/json5.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://json5.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/json5/json5/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e63967bb7b21d81f5e1c2dd54fa3283e18e1f7ad85fef8aa73af2949c125bdf2ddcd93e53c5ce97c15628e830b7375bf255c67facd8c035337873167f16acca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json5"
        }
      ]
    },
    {
      "type": "library",
      "name": "dateformat",
      "version": "3.0.3",
      "bom-ref": "dateformat@3.0.3",
      "author": "Steven Levithan",
      "description": "A node.js package for Steven Levithan's excellent dateFormat() function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dateformat@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/felixge/node-dateformat.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/felixge/node-dateformat",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/felixge/node-dateformat/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f20844ed4a5dd5319316791a3b898d452f5f607acd6de7984ca39c9a6a6e09aec9b910f2fcf54424a10472888f987f893caf666976782457c86bd6521d8dbdd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dateformat"
        }
      ]
    },
    {
      "type": "library",
      "name": "ejs",
      "version": "3.1.10",
      "bom-ref": "ejs@3.1.10",
      "author": "Matthew Eernisse",
      "description": "Embedded JavaScript templates",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ejs@3.1.10",
      "externalReferences": [
        {
          "url": "git://github.com/mde/ejs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mde/ejs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mde/ejs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "51e26615f3ab0104bc38958f678aad807c961316b4f3cfccb4ae54132a091851faedc0c45e4652be23a2291099e178a3d33c48dc9102818b37a0ac7e022cd004"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ejs"
        }
      ]
    },
    {
      "type": "library",
      "name": "jake",
      "version": "10.8.5",
      "bom-ref": "jake@10.8.5",
      "author": "Matthew Eernisse",
      "description": "JavaScript build tool, similar to Make or Rake",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jake@10.8.5",
      "externalReferences": [
        {
          "url": "git://github.com/jakejs/jake.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jakejs/jake#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jakejs/jake/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jake/-/jake-10.8.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b15a7161eb80856b743935884f04fdf28c95d06b17c8c957085fb72f54ae69f055508affb882c6441f8dab09338605cabe82690c8a50bea91400b81d990b10c7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jake"
        }
      ]
    },
    {
      "type": "library",
      "name": "chalk",
      "version": "4.1.2",
      "bom-ref": "chalk@4.1.2",
      "description": "Terminal string styling done right",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/chalk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/chalk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/chalk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chalk"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-styles",
      "version": "4.3.0",
      "bom-ref": "ansi-styles@4.3.0",
      "author": "Sindre Sorhus",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-styles.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-styles"
        }
      ]
    },
    {
      "type": "library",
      "name": "color-convert",
      "version": "2.0.1",
      "bom-ref": "color-convert@2.0.1",
      "author": "Heather Arthur",
      "description": "Plain color conversion functions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/Qix-/color-convert.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Qix-/color-convert#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Qix-/color-convert/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/color-convert"
        }
      ]
    },
    {
      "type": "library",
      "name": "color-name",
      "version": "1.1.4",
      "bom-ref": "color-name@1.1.4",
      "author": "DY",
      "description": "A list of color names and its values",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/colorjs/color-name.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/colorjs/color-name",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/colorjs/color-name/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/color-name"
        }
      ]
    },
    {
      "type": "library",
      "name": "supports-color",
      "version": "7.2.0",
      "bom-ref": "supports-color@7.2.0",
      "author": "Sindre Sorhus",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/supports-color.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/supports-color#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/supports-color/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/supports-color"
        }
      ]
    },
    {
      "type": "library",
      "name": "filelist",
      "version": "1.0.4",
      "bom-ref": "filelist@1.0.4",
      "author": "Matthew Eernisse",
      "description": "Lazy-evaluating list of files, based on globs or regex patterns",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/filelist@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/mde/filelist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mde/filelist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mde/filelist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c35704b9fdd2f83acb0902fb113ea4cfe82694975babd27bc970928cafce6423c0faa10dd56c85e1901fd186096b8fec84726b6b6b7f77fafc495e098bec7ef1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/filelist"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "minimatch",
          "version": "5.1.0",
          "bom-ref": "filelist@1.0.4|minimatch@5.1.0",
          "author": "Isaac Z. Schlueter",
          "description": "a glob matcher in javascript",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimatch@5.1.0",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/minimatch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/minimatch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/minimatch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f533c11866a4e271df199b0f068866f405a0e8da13ed04c27a14b704824006c97265bcf17d5efc40cd98ebe8bbe3538f64869f1406a2884321e4ec88ac93e0b6"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/filelist/node_modules/minimatch"
            }
          ]
        },
        {
          "type": "library",
          "name": "brace-expansion",
          "version": "2.0.1",
          "bom-ref": "filelist@1.0.4|brace-expansion@2.0.1",
          "author": "Julian Gruber",
          "description": "Brace expansion as known from sh/bash",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/brace-expansion@2.0.1",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/brace-expansion.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/brace-expansion",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/brace-expansion/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5e7008bd0f1e33e902e9a50bc7ac2e422c15b27cec8bd7775b1cd5dc5a564c6035f45eb6d64c1d6ec01c14a5e02941d95accbe998ea22f5b074f1584142cad0c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/filelist/node_modules/brace-expansion"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "express-partials",
      "version": "0.3.0",
      "bom-ref": "express-partials@0.3.0",
      "author": "Robert Sköld",
      "description": "Express 3.x Layout & Partial support.",
      "purl": "pkg:npm/express-partials@0.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/publicclass/express-partials.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/publicclass/express-partials#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/publicclass/express-partials/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/express-partials/-/express-partials-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "88b9c40164afd9a55278629b2948e6ace7bff45f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/express-partials"
        }
      ]
    },
    {
      "type": "library",
      "name": "express",
      "version": "4.21.2",
      "bom-ref": "express@4.21.2",
      "author": "TJ Holowaychuk",
      "description": "Fast, unopinionated, minimalist web framework",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/express@4.21.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/expressjs/express.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://expressjs.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/expressjs/express/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dbc1ea80c6409a28750b3b7d9f2eeaafa7a4daa75d17815c95b333c21091101e8e15f1fead7027b8d0b0a35ff016faed6e0b100dbe2449b5fd75ef6515bad79c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/express"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "2.6.9",
          "bom-ref": "express@4.21.2|debug@2.6.9",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@2.6.9",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/express/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "express@4.21.2|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/express/node_modules/ms"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.2.1",
          "bom-ref": "express@4.21.2|safe-buffer@5.2.1",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.2.1",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/express/node_modules/safe-buffer"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "accepts",
      "version": "1.3.8",
      "bom-ref": "accepts@1.3.8",
      "description": "Higher-level content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/accepts@1.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/accepts.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/accepts#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/accepts/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3d802d8536b69b654ac6ebd20f70cf0bf1b2f94fac380d4b02e4fc9a4991bafc3e34009269e5c443e34771517bace365eaa71ac55dd4b9e9b06b093eefe4892f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/accepts"
        }
      ]
    },
    {
      "type": "library",
      "name": "negotiator",
      "version": "0.6.3",
      "bom-ref": "negotiator@0.6.3",
      "description": "HTTP content negotiation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/negotiator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/negotiator#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/negotiator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f8452ca863cbb0cfa3ff37428598ec9d7e758385eb1c53885f07e70953c695093f9398226a470ab2ec4239b051bba0d29bda29c3f3bab2559b25d82140ce1b06"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/negotiator"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-flatten",
      "version": "1.1.1",
      "bom-ref": "array-flatten@1.1.1",
      "author": "Blake Embrey",
      "description": "Flatten an array of nested arrays into a single flat array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/blakeembrey/array-flatten.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/blakeembrey/array-flatten",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/blakeembrey/array-flatten/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9a5f699051b1e7073328f2a008968b64ea2955d2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-flatten"
        }
      ]
    },
    {
      "type": "library",
      "name": "content-disposition",
      "version": "0.5.4",
      "bom-ref": "content-disposition@0.5.4",
      "author": "Douglas Christopher Wilson",
      "description": "Create and parse Content-Disposition header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/content-disposition.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/content-disposition#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/content-disposition/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "16f7994cdb86c34e1cc6502259bce2eb34c02ff9617a16966d3b6096e261e3f13de43a8cc139a16b7299375680580f1c148847ccc654bcb7af930e51aa4fad49"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/content-disposition"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.2.1",
          "bom-ref": "content-disposition@0.5.4|safe-buffer@5.2.1",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.2.1",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/content-disposition/node_modules/safe-buffer"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "cookie-signature",
      "version": "1.0.6",
      "bom-ref": "cookie-signature@1.0.6",
      "author": "TJ Holowaychuk",
      "description": "Sign and unsign cookies",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/visionmedia/node-cookie-signature.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/visionmedia/node-cookie-signature#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/visionmedia/node-cookie-signature/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e303a882b342cc3ee8ca513a79999734dab3ae2c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cookie-signature"
        }
      ]
    },
    {
      "type": "library",
      "name": "cookie",
      "version": "0.7.1",
      "bom-ref": "cookie@0.7.1",
      "author": "Roman Shtylman",
      "description": "HTTP server cookie parsing and serialization",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cookie@0.7.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/cookie.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/cookie#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/cookie/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e839c89e9c7b489d802b7f824d413f64cd2f59351ba1909e831842db1888c9d1d1f6336e4c001206b7c4a4786218e670fe75f9d5b1ede98425f23b06a38cbfd3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cookie"
        }
      ]
    },
    {
      "type": "library",
      "name": "encodeurl",
      "version": "2.0.0",
      "bom-ref": "encodeurl@2.0.0",
      "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/encodeurl@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/pillarjs/encodeurl.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pillarjs/encodeurl#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pillarjs/encodeurl/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4349fd1d18b89ba26e188575785966bc907b644571bbddc8accca232c182d25acc24c5b3460c7a586aaec9f4206556f7d6f8468179df98f34d5e6c673a4441ae"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/encodeurl"
        }
      ]
    },
    {
      "type": "library",
      "name": "escape-html",
      "version": "1.0.3",
      "bom-ref": "escape-html@1.0.3",
      "description": "Escape string for use in HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/component/escape-html.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/component/escape-html#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/component/escape-html/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escape-html"
        }
      ]
    },
    {
      "type": "library",
      "name": "etag",
      "version": "1.8.1",
      "bom-ref": "etag@1.8.1",
      "description": "Create simple HTTP ETags",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/etag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/etag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/etag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/etag"
        }
      ]
    },
    {
      "type": "library",
      "name": "finalhandler",
      "version": "1.3.1",
      "bom-ref": "finalhandler@1.3.1",
      "author": "Douglas Christopher Wilson",
      "description": "Node.js final http responder",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/finalhandler@1.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pillarjs/finalhandler.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pillarjs/finalhandler#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pillarjs/finalhandler/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e8137db6b1fb6e9deabe7ad1cb3b01cfe837959c533594db54ed84575092d1621c0db6b0615758bc67e5304ffd40fd21d296250830424e361af67673303a72c5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/finalhandler"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "2.6.9",
          "bom-ref": "finalhandler@1.3.1|debug@2.6.9",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@2.6.9",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/finalhandler/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "finalhandler@1.3.1|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/finalhandler/node_modules/ms"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "parseurl",
      "version": "1.3.3",
      "bom-ref": "parseurl@1.3.3",
      "description": "parse a url with memoization",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/pillarjs/parseurl.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pillarjs/parseurl#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pillarjs/parseurl/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parseurl"
        }
      ]
    },
    {
      "type": "library",
      "name": "fresh",
      "version": "0.5.2",
      "bom-ref": "fresh@0.5.2",
      "author": "TJ Holowaychuk",
      "description": "HTTP response freshness testing",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/fresh.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/fresh#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/fresh/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cc9da6418335f2b1053ae75e57819285318843b45bcc0ee8cdb53d23f5c1a66ee4aa0332c209b294cc171f16499a45686249daf5dda95575573dd6133fd7a3f1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fresh"
        }
      ]
    },
    {
      "type": "library",
      "name": "merge-descriptors",
      "version": "1.0.3",
      "bom-ref": "merge-descriptors@1.0.3",
      "author": "Jonathan Ong",
      "description": "Merge objects using descriptors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/merge-descriptors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/merge-descriptors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/merge-descriptors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "81a36f012ed367cf7bfeb55a6749ccb40cb13728bfa5d6e36c0c14a4542937bd06aa755f3a25e979450c291066cd769243c0dd4d7e3fd26b3adabd8afa113a99"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/merge-descriptors"
        }
      ]
    },
    {
      "type": "library",
      "name": "methods",
      "version": "1.1.2",
      "bom-ref": "methods@1.1.2",
      "description": "HTTP methods that node supports",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/methods.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/methods#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/methods/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5529a4d67654134edcc5266656835b0f851afcee"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/methods"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-to-regexp",
      "version": "0.1.12",
      "bom-ref": "path-to-regexp@0.1.12",
      "description": "Express style path to RegExp utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/pillarjs/path-to-regexp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pillarjs/path-to-regexp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pillarjs/path-to-regexp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "440d468d454c9ef605c6eaa8beb12a668c715b935466a6f02ad633fd3b7b9d77ab9342db2db9509abb2075e3b15794851dfd140e08234bf6d278e670b75a6611"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-to-regexp"
        }
      ]
    },
    {
      "type": "library",
      "name": "proxy-addr",
      "version": "2.0.7",
      "bom-ref": "proxy-addr@2.0.7",
      "author": "Douglas Christopher Wilson",
      "description": "Determine address of proxied request",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/proxy-addr.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/proxy-addr#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/proxy-addr/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "96542c30b4940d43d3e388ddad4fcedfbaa59e27e2b433fe670ae699972848ac8b2afb59c69c95d27dbf6c3fcde2d040019fe024475953b28cadaa0ad7e5d802"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/proxy-addr"
        }
      ]
    },
    {
      "type": "library",
      "name": "forwarded",
      "version": "0.2.0",
      "bom-ref": "forwarded@0.2.0",
      "description": "Parse HTTP X-Forwarded-For header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/forwarded@0.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/forwarded.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/forwarded#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/forwarded/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/forwarded"
        }
      ]
    },
    {
      "type": "library",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "bom-ref": "ipaddr.js@1.9.1",
      "author": "whitequark",
      "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "url": "git://github.com/whitequark/ipaddr.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/whitequark/ipaddr.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/whitequark/ipaddr.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ipaddr.js"
        }
      ]
    },
    {
      "type": "library",
      "name": "range-parser",
      "version": "1.2.1",
      "bom-ref": "range-parser@1.2.1",
      "author": "TJ Holowaychuk",
      "description": "Range header field string parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/range-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/range-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/range-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/range-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "send",
      "version": "0.19.0",
      "bom-ref": "send@0.19.0",
      "author": "TJ Holowaychuk",
      "description": "Better streaming static file server with Range and conditional-GET support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/send@0.19.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/pillarjs/send.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pillarjs/send#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pillarjs/send/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/send/-/send-0.19.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "756e35bb955f2d7bbc4898796f0466c9851b028481ddcf6e421e8bf21fcab6c15110f5a96d7d65ae58c9a35f3a25ce2799c8bfb06519f5ad1ad09db381fab687"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/send"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "2.6.9",
          "bom-ref": "send@0.19.0|debug@2.6.9",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@2.6.9",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/send/node_modules/debug"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "ms",
              "version": "2.0.0",
              "bom-ref": "send@0.19.0|debug@2.6.9|ms@2.0.0",
              "description": "Tiny milisecond conversion utility",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/ms@2.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/zeit/ms.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/zeit/ms#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/zeit/ms/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/send/node_modules/debug/node_modules/ms"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "encodeurl",
          "version": "1.0.2",
          "bom-ref": "send@0.19.0|encodeurl@1.0.2",
          "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/encodeurl@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/pillarjs/encodeurl.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/pillarjs/encodeurl#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/pillarjs/encodeurl/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4cf257abc26a15a5589b609698fbe73f6232a3865233bfd029c4a6b8c2c339b7e91f97e2ed150699dfeb4c37feaeeb7fb1a88389011e5533600262447403b1d3"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/send/node_modules/encodeurl"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "mime",
      "version": "1.6.0",
      "bom-ref": "mime@1.6.0",
      "author": "Robert Kieffer",
      "description": "A comprehensive library for mime-type mapping",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/broofa/node-mime.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/broofa/node-mime#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/broofa/node-mime/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime"
        }
      ]
    },
    {
      "type": "library",
      "name": "ms",
      "version": "2.1.3",
      "bom-ref": "ms@2.1.3",
      "description": "Tiny millisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/vercel/ms.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/vercel/ms#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/vercel/ms/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ms"
        }
      ]
    },
    {
      "type": "library",
      "name": "serve-static",
      "version": "1.16.2",
      "bom-ref": "serve-static@1.16.2",
      "author": "Douglas Christopher Wilson",
      "description": "Serve static files",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/serve-static@1.16.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/expressjs/serve-static.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/expressjs/serve-static#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/expressjs/serve-static/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "56aa6325929a75007f3c46c4c2f15d3b8dc0c79745059d94102b33cfc6d0ee98bbc2dfff3d67b53fa30dede0a78ec6ad62d053e84ba20a56e34963f65ab2284f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/serve-static"
        }
      ]
    },
    {
      "type": "library",
      "name": "utils-merge",
      "version": "1.0.1",
      "bom-ref": "utils-merge@1.0.1",
      "author": "Jared Hanson",
      "description": "merge() utility function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        },
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "http://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/jaredhanson/utils-merge.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jaredhanson/utils-merge#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/jaredhanson/utils-merge/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9f95710f50a267947b2ccc124741c1028427e713"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/utils-merge"
        }
      ]
    },
    {
      "type": "library",
      "name": "vary",
      "version": "1.1.2",
      "bom-ref": "vary@1.1.2",
      "author": "Douglas Christopher Wilson",
      "description": "Manipulate the HTTP Vary header",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/vary.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/vary#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/vary/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2299f02c6ded30d4a5961b0b9f74524a18f634fc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/vary"
        }
      ]
    },
    {
      "type": "library",
      "name": "inflection",
      "version": "1.13.4",
      "bom-ref": "inflection@1.13.4",
      "author": "dreamerslab",
      "description": "A port of inflection-js to node.js module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inflection@1.13.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/dreamerslab/node.inflection.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dreamerslab/node.inflection#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dreamerslab/node.inflection/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inflection/-/inflection-1.13.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e88fc750379815fb8d0954b7b5dd39e41697070298bb3c3b2b713154c4ad068c0aa3da0e00c2485c81ef77247789ba130a9d5bfb58b90d2908653730224b6e0f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inflection"
        }
      ]
    },
    {
      "type": "library",
      "name": "ioredis",
      "version": "5.5.0",
      "bom-ref": "ioredis@5.5.0",
      "author": "Zihua Li",
      "description": "A robust, performance-focused and full-featured Redis client for Node.js.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ioredis@5.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/luin/ioredis.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/luin/ioredis#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/luin/ioredis/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ioredis/-/ioredis-5.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ec2bad4fcf60db715f49af0c0e8205b3619861ad0f68d896fcead3fa74728d15c70d9775ec7988832fab78e43fca187bd8dce73631ae4bc91b080700e11a389b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ioredis"
        }
      ]
    },
    {
      "type": "library",
      "name": "commands",
      "group": "@ioredis",
      "version": "1.2.0",
      "bom-ref": "@ioredis/commands@1.2.0",
      "author": "Zihua Li",
      "description": "Redis commands",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40ioredis/commands@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ioredis/commands.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ioredis/commands",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ioredis/commands/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@ioredis/commands/-/commands-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4b1d6953c10ceb8a3606ba8da443b508d2ed290c3286e5eeab27c7ee818a0a4fb56b7ddddabe6c696f333709b78fa053131b63aefd81c53833ce4330b6ceaf1a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@ioredis/commands"
        }
      ]
    },
    {
      "type": "library",
      "name": "cluster-key-slot",
      "version": "1.1.0",
      "bom-ref": "cluster-key-slot@1.1.0",
      "author": "Mike Diarmid",
      "description": "Generates CRC hashes for strings - for use by node redis clients to determine key slots.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cluster-key-slot@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/Salakar/cluster-key-slot.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Salakar/cluster-key-slot#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Salakar/cluster-key-slot/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cluster-key-slot/-/cluster-key-slot-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d8d8a2f29dd1c003e2170b2766fba4a2dbe8c36ac81ccfb243a65c05718776789a7646066588869a41c921b64f215f677efee6fd4d483cc5557008685857a497"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cluster-key-slot"
        }
      ]
    },
    {
      "type": "library",
      "name": "debug",
      "version": "4.4.0",
      "bom-ref": "debug@4.4.0",
      "author": "Josh Junon",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/debug-js/debug.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/debug-js/debug#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/debug-js/debug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e964d9fc8c4263f4fa0402e8647684e1cb69f719be679918fe9cd86821d115ec958688f196b9bee3acbaf0703a86bd1373012cb28c4d8831142508df3d9fd160"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/debug"
        }
      ]
    },
    {
      "type": "library",
      "name": "denque",
      "version": "2.1.0",
      "bom-ref": "denque@2.1.0",
      "author": "Invertase",
      "description": "The fastest javascript implementation of a double-ended queue. Used by the official Redis, MongoDB, MariaDB & MySQL libraries for Node.js and many other libraries. Maintains compatability with deque.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/denque@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/invertase/denque.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://docs.page/invertase/denque",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/invertase/denque/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/denque/-/denque-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1d5404dc001bfe9c45f1f400a22aa9be0f62ddebeaba0de1a22c1a90ec99030266fbabd97a16e46176749782714be23743133deefe5a6913618fcbf9a0185e93"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/denque"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.defaults",
      "version": "4.2.0",
      "bom-ref": "lodash.defaults@4.2.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.defaults` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.defaults@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d09178716ffea4dde9e5fb7b37f6f0802274580c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.defaults"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isarguments",
      "version": "3.1.0",
      "bom-ref": "lodash.isarguments@3.1.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isArguments` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isarguments@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2f573d85c6a24289ff00663b491c1d338ff3458a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isarguments"
        }
      ]
    },
    {
      "type": "library",
      "name": "redis-errors",
      "version": "1.2.0",
      "bom-ref": "redis-errors@1.2.0",
      "author": "Ruben Bridgewater",
      "description": "Error classes used in node_redis",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/redis-errors@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/NodeRedis/redis-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/NodeRedis/redis-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/NodeRedis/redis-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/redis-errors/-/redis-errors-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eb62d2adb15e4eaf4610c04afe1529384250abad"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/redis-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "redis-parser",
      "version": "3.0.0",
      "bom-ref": "redis-parser@3.0.0",
      "author": "Ruben Bridgewater",
      "description": "Javascript Redis protocol (RESP) parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/redis-parser@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/NodeRedis/node-redis-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/NodeRedis/node-redis-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/NodeRedis/node-redis-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/redis-parser/-/redis-parser-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b66d828cdcafe6b4b8a428a7def4c6bcac31c8b4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/redis-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "standard-as-callback",
      "version": "2.1.0",
      "bom-ref": "standard-as-callback@2.1.0",
      "author": "luin",
      "description": "A performant and standard (Bluebird) library that registers a node-style callback on a promise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/standard-as-callback@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/luin/asCallback.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/luin/asCallback#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/luin/asCallback/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/standard-as-callback/-/standard-as-callback-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa84514b244e9dc6b3d73d26bd8a8813894277da7647dd22e86c56dee66fe6e712bbcb54ec1e475d43f5806f29559b183556978e4f029571cfb6d2f2c402f8f0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/standard-as-callback"
        }
      ]
    },
    {
      "type": "library",
      "name": "jquery.json-viewer",
      "version": "1.5.0",
      "bom-ref": "jquery.json-viewer@1.5.0",
      "author": "Alexandre Bodelot",
      "description": "jQuery plugin for displaying JSON data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jquery.json-viewer@1.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/abodelot/jquery.json-viewer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/abodelot/jquery.json-viewer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/abodelot/jquery.json-viewer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jquery.json-viewer/-/jquery.json-viewer-1.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "33f991157835e15fd4500973ed304d0480e641d5add3906e9eca82fd48c4c7906815d4293697e47c37559fe56d8d7f79d67fda9ff4fd1960776a9069d36c7c32"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jquery.json-viewer"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonwebtoken",
      "version": "9.0.2",
      "bom-ref": "jsonwebtoken@9.0.2",
      "author": "auth0",
      "description": "JSON Web Token implementation (symmetric and asymmetric)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonwebtoken@9.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/auth0/node-jsonwebtoken.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/auth0/node-jsonwebtoken#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/auth0/node-jsonwebtoken/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3d1a7aeaf27ceb9492a8e960a92f21ba34f953800e80c7e1af0608b8885f29aa12099722aeb980490afc097edc520f9132287e860ce7ae3a7df68f96e2924b1d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonwebtoken"
        }
      ]
    },
    {
      "type": "library",
      "name": "jws",
      "version": "3.2.2",
      "bom-ref": "jws@3.2.2",
      "author": "Brian J Brennan",
      "description": "Implementation of JSON Web Signatures",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jws@3.2.2",
      "externalReferences": [
        {
          "url": "git://github.com/brianloveswords/node-jws.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/brianloveswords/node-jws#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/brianloveswords/node-jws/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jws/-/jws-3.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "607959081ea5313965583b523c7cff6574ec8bc4b4d2eb0457abf5b63abcb4e519cf0ec3a520d65578d70eb7ba79dd70fe9778f79383a4765849d9114ec6b41c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jws"
        }
      ]
    },
    {
      "type": "library",
      "name": "jwa",
      "version": "1.4.1",
      "bom-ref": "jwa@1.4.1",
      "author": "Brian J. Brennan",
      "description": "JWA implementation (supports all JWS algorithms)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jwa@1.4.1",
      "externalReferences": [
        {
          "url": "git://github.com/brianloveswords/node-jwa.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/brianloveswords/node-jwa#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/brianloveswords/node-jwa/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jwa/-/jwa-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa22d7ff1844105294009e8588131b7acdf0f404f3ca4e56ec7bf3a5afd22d877136d9e0fa072eaefac8ed36c00a321796c272af4e7f4b5a14859adceb77af40"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jwa"
        }
      ]
    },
    {
      "type": "library",
      "name": "buffer-equal-constant-time",
      "version": "1.0.1",
      "bom-ref": "buffer-equal-constant-time@1.0.1",
      "author": "GoInstant Inc., a salesforce.com company",
      "description": "Constant-time comparison of Buffers",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/buffer-equal-constant-time@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/goinstant/buffer-equal-constant-time.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/goinstant/buffer-equal-constant-time#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/goinstant/buffer-equal-constant-time/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f8e71132f7ffe6e01a5c9697a4c6f3e48d5cc819"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/buffer-equal-constant-time"
        }
      ]
    },
    {
      "type": "library",
      "name": "ecdsa-sig-formatter",
      "version": "1.0.11",
      "bom-ref": "ecdsa-sig-formatter@1.0.11",
      "author": "D2L Corporation",
      "description": "Translate ECDSA signatures between ASN.1/DER and JOSE-style concatenation",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/Brightspace/node-ecdsa-sig-formatter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Brightspace/node-ecdsa-sig-formatter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Brightspace/node-ecdsa-sig-formatter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9da825dd162b6cdbfa91091e248a6de8d259cbcb702c1ff6bedcfac8df59e2f44a1cde3f41924811baa88402d283029d9e4b2e63793901d769e6583cb15a1571"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ecdsa-sig-formatter"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.includes",
      "version": "4.3.0",
      "bom-ref": "lodash.includes@4.3.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.includes` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.includes@4.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5b7071ea67644531ad9492123af543fe56ea8d394f3d40d33279576459d5c22f4d289ead88093a2d5765859326d7b5598acaa129c833a4ee56cfdd4f0ade5bd3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.includes"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isboolean",
      "version": "3.0.3",
      "bom-ref": "lodash.isboolean@3.0.3",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isBoolean` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isboolean@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "073e66ba9cb64956cf1d4441f7c540730f9a1e1e2f455e483cd8482d40ac3b3466b13992435ee322eaa8a407a7b56a1e864b7119df5efe16c85eaf7cd3fd5026"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isboolean"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isinteger",
      "version": "4.0.4",
      "bom-ref": "lodash.isinteger@4.0.4",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isInteger` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isinteger@4.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0c1c2d11637671a1d0f7f8a688d784039cacd49a11b517d8ddded5f7092ab5bc9c9c0993bd14666c72835786b411873aefcfdd89ad23aed7b8b6363054169950"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isinteger"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isnumber",
      "version": "3.0.3",
      "bom-ref": "lodash.isnumber@3.0.3",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isNumber` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isnumber@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "418ab3a5fc0edff0967f75cff99fad910b1f68b2ff1275255d6564224e4550f738b017537a112a64e36ec91b763faecf5c093e35799305c73def3c3db75150af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isnumber"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isplainobject",
      "version": "4.0.6",
      "bom-ref": "lodash.isplainobject@4.0.6",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isPlainObject` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a125f3696ca908c1e43c2dcdbc111a3c77f42ac0399af3eb38f810583b1b83c9fba2b676f743340660bf8e0459e2f709e834c0863aec49881db16fc5f8c14e04"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isplainobject"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isstring",
      "version": "4.0.1",
      "bom-ref": "lodash.isstring@4.0.1",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isString` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isstring@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d302717f11f5c203b71ab6ee3fe7534e4ee8a7ee8be354025db188344983fa7cbf1bf782a86cf1c82b21ef5e7d4be9a00c37286ab9c1c3a3c2d4f4b9fb050683"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isstring"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.once",
      "version": "4.1.1",
      "bom-ref": "lodash.once@4.1.1",
      "author": "John-David Dalton",
      "description": "The lodash method `_.once` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.once@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "49be3ceda4ce0abf5dad054bf292313b356169f3a364df54539e2188df0f537b8089257b971d7260da5b3667b1d8f2ba752268353489514b304fae75cb0c3732"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.once"
        }
      ]
    },
    {
      "type": "library",
      "name": "semver",
      "version": "7.5.4",
      "bom-ref": "semver@7.5.4",
      "author": "GitHub Inc.",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/semver@7.5.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-semver.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/node-semver#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/node-semver/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/semver/-/semver-7.5.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d5b09211257a3effa2db51efa71a770f1fa9483f2520fb7cb958d1af1014b7f9dbb3061cfad2ba6366ed8942e3778f9f9ead793d7fa7a900c2ece7eded693070"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/semver"
        }
      ]
    },
    {
      "type": "library",
      "name": "lru-cache",
      "version": "6.0.0",
      "bom-ref": "lru-cache@6.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@6.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-lru-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-lru-cache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-lru-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "268e9d274e029928eece7c09492de951e5a677f1f47df4e59175e0c198be7aad540a6a90c0287e78bb183980b063df758b615a878875044302c78a938466ec88"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lru-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "yallist",
      "version": "4.0.0",
      "bom-ref": "yallist@4.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/yallist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/yallist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yallist"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstree",
      "version": "3.3.17",
      "bom-ref": "jstree@3.3.17",
      "author": "Ivan Bozhanov",
      "description": "jQuery tree plugin",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        },
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/vakata/jstree/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/jstree@3.3.17",
      "externalReferences": [
        {
          "url": "git://github.com/vakata/jstree.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://jstree.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/vakata/jstree/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstree/-/jstree-3.3.17.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5743e5d41e8121ac475103225a4a25dfb42586504aa1903d4547949a6f79f949d5d90799b23d903f5b0e425fe6d8420ec995ce3b1387bd1d126192d20c2ec417"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstree"
        }
      ]
    },
    {
      "type": "library",
      "name": "jquery",
      "version": "3.6.0",
      "bom-ref": "jquery@3.6.0",
      "author": "OpenJS Foundation and other contributors",
      "description": "JavaScript library for DOM operations",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jquery@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jquery/jquery.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://jquery.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jquery/jquery/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jquery/-/jquery-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "255cc047f02306f56dd81998871442498cac0ec3dcb2c7664c59f3c8b12db3da8dc268e6bb825300c62e6c47f054e4b0a50d48d6c28a15cc616422366ee7ab7f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jquery"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isequal",
      "version": "4.5.0",
      "bom-ref": "lodash.isequal@4.5.0",
      "author": "John-David Dalton",
      "description": "The Lodash method `_.isEqual` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isequal@4.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isequal/-/lodash.isequal-4.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "415c4478f2bcc30120c22ce10ed3226f7d3e18e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isequal"
        }
      ]
    },
    {
      "type": "library",
      "name": "lossless-json",
      "version": "1.0.5",
      "bom-ref": "lossless-json@1.0.5",
      "author": "Jos de Jong",
      "description": "Parse JSON without risk of losing numeric information",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lossless-json@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/josdejong/lossless-json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/josdejong/lossless-json#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/josdejong/lossless-json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lossless-json/-/lossless-json-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "46270a52e2f0655359e997491e02199d2780d39a7ca96739356d2e47dea6a4f22337d5832d483dfa48f57ac414d4690f9fd88b65529ab5240ae60ca26851e024"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lossless-json"
        }
      ]
    },
    {
      "type": "library",
      "name": "mocha-junit-reporter",
      "version": "2.2.1",
      "bom-ref": "mocha-junit-reporter@2.2.1",
      "author": "Michael Allen",
      "description": "A JUnit reporter for mocha.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mocha-junit-reporter@2.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/michaelleeallen/mocha-junit-reporter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/michaelleeallen/mocha-junit-reporter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/michaelleeallen/mocha-junit-reporter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mocha-junit-reporter/-/mocha-junit-reporter-2.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8839f6b652879fc561f28e270b3714556e2aee25e9edc0b8101efc3747031c8a1b2f29b21cdc1ed171bc1c41c78dcde12655e6d15cbacdcaf16888672367d69b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mocha-junit-reporter"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "mkdirp",
          "version": "3.0.1",
          "bom-ref": "mocha-junit-reporter@2.2.1|mkdirp@3.0.1",
          "description": "Recursively mkdir, like `mkdir -p`",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/mkdirp@3.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/node-mkdirp.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-mkdirp#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-mkdirp/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-3.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f8db325140190e6a3a6151f32ffb2dc52bb7b7d612d62963962cb70520eb5c9fdd927d4a61d9ad64e0c61a32dc73d5cb8155691f82ac84707c5e66603216815e"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha-junit-reporter/node_modules/mkdirp"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "md5",
      "version": "2.3.0",
      "bom-ref": "md5@2.3.0",
      "author": "Paul Vorbach",
      "description": "js function for hashing messages with MD5",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/md5@2.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/pvorb/node-md5.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pvorb/node-md5#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pvorb/node-md5/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/md5/-/md5-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4f51884d898568ab8ef75bf1ca840c1444ecb7e3bbd5550f114df37b918dcc39b439674ff2fd7389368010f52bff790bb18dd27ed833db8d80d527ad4220cbee"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/md5"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "charenc",
      "version": "0.0.2",
      "bom-ref": "charenc@0.0.2",
      "author": "Paul Vorbach",
      "description": "character encoding utilities",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/charenc@0.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/pvorb/node-charenc.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pvorb/node-charenc#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pvorb/node-charenc/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/charenc/-/charenc-0.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cab2d0ff255415793383b10342c3e2784ff9dfed1195a593b3ec01aef5b7e9cca2949d9268359f978623eccb4b4d795e57db8429e7db00650fbf6fe2592a2844"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/charenc"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "crypt",
      "version": "0.0.2",
      "bom-ref": "crypt@0.0.2",
      "author": "Paul Vorbach",
      "description": "utilities for encryption and hashing",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/crypt@0.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/pvorb/node-crypt.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pvorb/node-crypt#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pvorb/node-crypt/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/crypt/-/crypt-0.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "982c4196c1c5621f42f8756988469c7a6f051019cc5e053d832e3398d0be497019341ff589d829fdaba5149e058028bb18f1156dfca7834f761aa2f6936ae6a3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/crypt"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "mocha",
      "version": "11.1.0",
      "bom-ref": "mocha@11.1.0",
      "author": "TJ Holowaychuk",
      "description": "simple, flexible, fun test framework",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mocha@11.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mochajs/mocha.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mochajs.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mochajs/mocha/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mocha/-/mocha-11.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f2e251e514c2d8d8296371ab61c82966bb0477dcca6cf0e9a1bd517b3c91daea461d142d1d6a1f9b34cccd331257a76bbb7b63e5492dd3e567ab5aa114413002"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mocha"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "glob",
          "version": "10.4.5",
          "bom-ref": "mocha@11.1.0|glob@10.4.5",
          "author": "Isaac Z. Schlueter",
          "description": "the most correct and second fastest glob implementation in JavaScript",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/glob@10.4.5",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-glob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-glob#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-glob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/glob/-/glob-10.4.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ec1bfc445d24eb18e8edde00fcfc582db5027dbe9cf95a5ddbf981db244395ec3b25be611178820fd89b7ceef0a64f22e2c7af2ba0c59f2f61ec461b337fec1e"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha/node_modules/glob"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "minimatch",
              "version": "9.0.5",
              "bom-ref": "mocha@11.1.0|glob@10.4.5|minimatch@9.0.5",
              "author": "Isaac Z. Schlueter",
              "description": "a glob matcher in javascript",
              "licenses": [
                {
                  "license": {
                    "id": "ISC",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/minimatch@9.0.5",
              "externalReferences": [
                {
                  "url": "git://github.com/isaacs/minimatch.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/isaacs/minimatch#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/isaacs/minimatch/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "1ba4f4657e3cc60a33c7be7cee4a1e5fd62cd8d632e869affff3fcf6c12d7bd57dc2121aa4c345e2274ac675b642d09c2e24d695bff07c269b02d0055a1841a3"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/mocha/node_modules/glob/node_modules/minimatch"
                },
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "foreground-child",
          "version": "3.3.0",
          "bom-ref": "mocha@11.1.0|foreground-child@3.3.0",
          "author": "Isaac Z. Schlueter",
          "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/foreground-child@3.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/tapjs/foreground-child.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/tapjs/foreground-child#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/tapjs/foreground-child/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2ddda0f2bac0c8c6055c1844a8ccfc6401c18b8278b92d62fc2c463039e3c8559d74c5cb55c0e9d39d4365fbbeb7bf9a6fb5afe9232aa569b21488f951b7c5be"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha/node_modules/foreground-child"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "signal-exit",
          "version": "4.1.0",
          "bom-ref": "mocha@11.1.0|signal-exit@4.1.0",
          "author": "Ben Coe",
          "description": "when you want to fire an event no matter how a process exits.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/signal-exit@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/tapjs/signal-exit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/tapjs/signal-exit#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/tapjs/signal-exit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6f3c99d5ef3cc3d3b588d25b2a73a5bd84eb58f0e5e3a3b56c6d03dd7227bfef6d90faf1acdf235144e21650e4926296827d4ce827c8035dd2b86a8e6bd2a8af"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha/node_modules/signal-exit"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "brace-expansion",
          "version": "2.0.1",
          "bom-ref": "mocha@11.1.0|brace-expansion@2.0.1",
          "author": "Julian Gruber",
          "description": "Brace expansion as known from sh/bash",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/brace-expansion@2.0.1",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/brace-expansion.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/brace-expansion",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/brace-expansion/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5e7008bd0f1e33e902e9a50bc7ac2e422c15b27cec8bd7775b1cd5dc5a564c6035f45eb6d64c1d6ec01c14a5e02941d95accbe998ea22f5b074f1584142cad0c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha/node_modules/brace-expansion"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "minipass",
          "version": "7.1.2",
          "bom-ref": "mocha@11.1.0|minipass@7.1.2",
          "author": "Isaac Z. Schlueter",
          "description": "minimal implementation of a PassThrough stream",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minipass@7.1.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/minipass.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/minipass#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/minipass/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minipass/-/minipass-7.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a8e3b34b57014d6605e011fc7d578f0c138ef62a6d327194119c0d73f70c5a74d5da754b67b56835610f1e461ccd9034a5da00edd97a7bb14beb9f675fd4b66b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha/node_modules/minipass"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimatch",
          "version": "5.1.6",
          "bom-ref": "mocha@11.1.0|minimatch@5.1.6",
          "author": "Isaac Z. Schlueter",
          "description": "a glob matcher in javascript",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimatch@5.1.6",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/minimatch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/minimatch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/minimatch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.6.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "94ac15ff56eba46ea6054147b5becd526b400426f65996669b6c0d88e0398406fc55d092e01dddb4c5b2bdca1589c730016fc23844635cbb74ccfd735d4376ea"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha/node_modules/minimatch"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "supports-color",
          "version": "8.1.1",
          "bom-ref": "mocha@11.1.0|supports-color@8.1.1",
          "author": "Sindre Sorhus",
          "description": "Detect whether a terminal supports color",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/supports-color@8.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/supports-color.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/supports-color#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/supports-color/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3295043763a876d533c6f29097bd9c505ed14391221ec1af4ac546d226bd73945b5862f6088e02ec4a4f4bc513048a659e5cd988db95e7ac3e16e371cb7b72d9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mocha/node_modules/supports-color"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-ansi",
      "version": "6.0.1",
      "bom-ref": "strip-ansi@6.0.1",
      "author": "Sindre Sorhus",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/strip-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-regex",
      "version": "5.0.1",
      "bom-ref": "ansi-regex@5.0.1",
      "author": "Sindre Sorhus",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "xml",
      "version": "1.0.1",
      "bom-ref": "xml@1.0.1",
      "author": "Dylan Greene",
      "description": "Fast and simple xml generator. Supports attributes, CDATA, etc. Includes tests and examples.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/xml@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/dylang/node-xml.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dylang/node-xml",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/dylang/node-xml/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/xml/-/xml-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "86e0aff481fd4dc7fde73b980ac42b699b569c9bc1b4b544d101cc3acf1b5b26401593437188ec3ead67131f23280f72f817a8f6ffbb3813d18ac4138e29d033"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/xml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-colors",
      "version": "4.1.3",
      "bom-ref": "ansi-colors@4.1.3",
      "author": "Brian Woodward",
      "description": "Easily add ANSI colors to your text and symbols in the terminal. A faster drop-in replacement for chalk, kleur and turbocolor (without the dependencies and rendering bugs).",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-colors@4.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/doowb/ansi-colors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/doowb/ansi-colors",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/doowb/ansi-colors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-4.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ffac3f0b6d4f9b503b6998ad948e4d8bfd89e8515037c8b50afcf79070010006f0f77bff365bca7553aacfb0825b3ff78affc9a6545210467cdd720e375e68bf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-colors"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browser-stdout",
      "version": "1.3.1",
      "bom-ref": "browser-stdout@1.3.1",
      "author": "kumavis",
      "description": "`process.stdout` in your browser.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browser-stdout@1.3.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/kumavis/browser-stdout.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kumavis/browser-stdout#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kumavis/browser-stdout/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa1015235f80bf65fba9e94e7c0218c1738da2877a5e5644fdf5da052996fd3e52ccb0260a0ce2f9e89613b7d4bdb1da78d0501f5dd47ed8e95f1b1f2e432983"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browser-stdout"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "chokidar",
      "version": "3.5.3",
      "bom-ref": "chokidar@3.5.3",
      "author": "Paul Miller",
      "description": "Minimal and efficient cross-platform file watching library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chokidar@3.5.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/paulmillr/chokidar.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/paulmillr/chokidar",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/paulmillr/chokidar/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0ebdec7ca44fea84dc8dfd8999498525f79532f5c175e83107489543979bd95d74b852540804bc381c9975503255bf315cdcf71a38d3823f642d6b194ea13a93"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chokidar"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "anymatch",
      "version": "3.1.2",
      "bom-ref": "anymatch@3.1.2",
      "author": "Elan Shanker",
      "description": "Matches strings against configurable strings, globs, regular expressions, and/or functions",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/anymatch@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/anymatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/anymatch",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/anymatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3f8dde3df38022ea6482e1d4c9cadce2a27d933f198ae3948a36844f05fb4c7b7463f18d2bbbf469af2b63cd7ac568d9eeb25d0395dd31ca5515328cabe46f5a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/anymatch"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "normalize-path",
      "version": "3.0.0",
      "bom-ref": "normalize-path@3.0.0",
      "author": "Jon Schlinkert",
      "description": "Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/normalize-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/normalize-path",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/normalize-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e9e66ce4bb375ad0a2b075a9f52d86532f1daa4a468b80554b3dc66aa884e9ecee6f4e75d844b3b57530501e82e8829b4246363e76ff983e166288c24707302c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/normalize-path"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "picomatch",
      "version": "2.3.1",
      "bom-ref": "picomatch@2.3.1",
      "author": "Jon Schlinkert",
      "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/picomatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/picomatch",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/picomatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "254ded7874cd8e6136542185cee63c117cc20d5c04a81d9af1fb08bf0692b4784058911e55dd68d500fcd0253af997445d748b6d2b2e2f0263902056a9141454"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/picomatch"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "braces",
      "version": "3.0.3",
      "bom-ref": "braces@3.0.3",
      "author": "Jon Schlinkert",
      "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/braces@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/braces.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/braces",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/braces/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c906d780efce499543d88b222e5ae8fbb1dfe90d7c109aca484b1da0ccca78f29772dde0bc3f282dc390748cc6ba9af9163f840def203bf9717350737cca71bc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/braces"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "fill-range",
      "version": "7.1.1",
      "bom-ref": "fill-range@7.1.1",
      "author": "Jon Schlinkert",
      "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fill-range@7.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/fill-range.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/fill-range",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/fill-range/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "62c1a97b75872caf19622e2d583836272dde6d1cf6ad7a300f19e57786e4401d3471cff5670f405a70b48bdced0c98ad8afb50bda23d29a2f22ab73e8415b4ca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fill-range"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "to-regex-range",
      "version": "5.0.1",
      "bom-ref": "to-regex-range@5.0.1",
      "author": "Jon Schlinkert",
      "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/to-regex-range.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/to-regex-range",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/to-regex-range/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-regex-range"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-number",
      "version": "7.0.0",
      "bom-ref": "is-number@7.0.0",
      "author": "Jon Schlinkert",
      "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-number.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-number",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-number/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-number"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "glob-parent",
      "version": "5.1.2",
      "bom-ref": "glob-parent@5.1.2",
      "author": "Gulp Team",
      "description": "Extract the non-magic parent path from a glob string.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/gulpjs/glob-parent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gulpjs/glob-parent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gulpjs/glob-parent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/glob-parent"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-glob",
      "version": "4.0.3",
      "bom-ref": "is-glob@4.0.3",
      "author": "Jon Schlinkert",
      "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/is-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/is-glob",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/is-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-glob"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-binary-path",
      "version": "2.1.0",
      "bom-ref": "is-binary-path@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if a file path is a binary file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-binary-path@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-binary-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-binary-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-binary-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "64c11161eb3aa43c9dcae1a276c7bb3ac1f1b5b23b595794128ce047f83baddd31522998365bd9444fcad8c8194e35b2ef6e487de94b79570433dee69ad4465f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-binary-path"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "binary-extensions",
      "version": "2.2.0",
      "bom-ref": "binary-extensions@2.2.0",
      "author": "Sindre Sorhus",
      "description": "List of binary file extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/binary-extensions@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/binary-extensions.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/binary-extensions#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/binary-extensions/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8c372d27f21541b6682729287876e15e93a5341a8635cc1724a268838d84e470cf53041349d8c21dd8a18e3d0396785e43b6e56d3e9d1ce69f340892f28a1028"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/binary-extensions"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-extglob",
      "version": "2.1.1",
      "bom-ref": "is-extglob@2.1.1",
      "author": "Jon Schlinkert",
      "description": "Returns true if a string has an extglob.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-extglob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-extglob",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-extglob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "49b29b00d90deb4dd58b88c466fe3d2de549327e321b0b1bcd9c28ac4a32122badb0dde725875b3b7eb37e1189e90103a4e6481640ed9eae494719af9778eca1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-extglob"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "readdirp",
      "version": "3.6.0",
      "bom-ref": "readdirp@3.6.0",
      "author": "Thorsten Lorenz",
      "description": "Recursive version of fs.readdir with streaming API.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readdirp@3.6.0",
      "externalReferences": [
        {
          "url": "git://github.com/paulmillr/readdirp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/paulmillr/readdirp",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/paulmillr/readdirp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "84e4b4f3da27f1176ea9d6e1bd0e59dfb0341128ecab3eaa9d171f7ec314df8f7916e4dda929beedb849dbd26f20eb010c41276a7e433eef6ddd3a3d55194ccc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readdirp"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "diff",
      "version": "5.2.0",
      "bom-ref": "diff@5.2.0",
      "description": "A JavaScript text diff implementation.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/diff@5.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/kpdecker/jsdiff.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kpdecker/jsdiff#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/kpdecker/jsdiff/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/diff/-/diff-5.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b88143c6aa5164667a4e13a4f388447ea5a81f1d9d7af445be94d97131eeafce6f2267dac546d35bd4728780a90ae0e74e838fd4212d5ca220cad1c13d57dfe4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/diff"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "bom-ref": "escape-string-regexp@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Escape RegExp special characters",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/escape-string-regexp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4eda5c349dd7033c771aaf2c591cc96956a346cd2e57103660091d6f58e6d9890fcf81ba7a05050320379f9bed10865e7cf93959ae145db2ae4b97ca90959d80"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escape-string-regexp"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "find-up",
      "version": "5.0.0",
      "bom-ref": "find-up@5.0.0",
      "author": "Sindre Sorhus",
      "description": "Find a file or directory by walking up parent directories",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/find-up.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/find-up#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/find-up/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/find-up/-/find-up-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "efcfcf5d3d7094b2c3813cc3b3bb23abd873cf4bd70fece7fbbc32a447b87d74310a6766a9f1ac10f4319a2092408dda8c557dd5b552b2f36dac94625ba9c69e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/find-up"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "locate-path",
      "version": "6.0.0",
      "bom-ref": "locate-path@6.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the first path that exists on disk of multiple paths",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/locate-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/locate-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/locate-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "88f64ae9e6236f146edee078fd667712c10830914ca80a28a65dd1fb3baad148dc026fcc3ba282c1e0e03df3f77a54f3b6828fdcab67547c539f63470520d553"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/locate-path"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-locate",
      "version": "5.0.0",
      "bom-ref": "p-locate@5.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-locate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-locate#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-locate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2da363b51594058fbecc1e6713f37071aa0cca548f93e4be647341d53cdd6cc24c9f2e9dca7a401aded7fed97f418ab74c8784ea7c47a696e8d8b1b29ab1b93f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-locate"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-limit",
      "version": "3.1.0",
      "bom-ref": "p-limit@3.1.0",
      "author": "Sindre Sorhus",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-limit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-limit#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-limit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4d839a9ccdf01b0346b193767154d83c0af0e39e319d78f9aa6585d5b12801ce3e714fe897b19587ba1d7af8e9d4534776e1dcdca64c70576ec54e5773ab8945"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-limit"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "yocto-queue",
      "version": "0.1.0",
      "bom-ref": "yocto-queue@0.1.0",
      "author": "Sindre Sorhus",
      "description": "Tiny queue data structure",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/yocto-queue.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/yocto-queue#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/yocto-queue/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ad592cbec9cd09d27fa2119ceb180fc3237c7a1782c6c88b33c9b1b84fedfe6395a897b03ee3b59a22e94c74224604ca08b7b12f831e00555a82db3b1e6359d9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yocto-queue"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-exists",
      "version": "4.0.0",
      "bom-ref": "path-exists@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a path exists",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-exists.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-exists#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-exists/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-exists"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "cross-spawn",
      "version": "7.0.6",
      "bom-ref": "cross-spawn@7.0.6",
      "author": "André Cruz",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/moxystudio/node-cross-spawn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/moxystudio/node-cross-spawn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/moxystudio/node-cross-spawn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b95d903963f69d6ceccb668ca7c69189b862f5d9731791e0879487681f4e893184c834e2249cb1d2ecb9d505ddc966ed00736e6b85c9cd429c6b73b3294777bc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cross-spawn"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "jackspeak",
      "version": "3.4.3",
      "bom-ref": "jackspeak@3.4.3",
      "author": "Isaac Z. Schlueter",
      "description": "A very strict and proper argument parser.",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/jackspeak.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/jackspeak#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/jackspeak/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "386959429cf6c9f6a103f45dd58f0277d48812caaf5e42d5a12c3f720c219e114c0dbb1015e658a0927b6c86414bd05c6a6516f7a6acabf9e93d6ba033e45007"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jackspeak"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "cliui",
      "group": "@isaacs",
      "version": "8.0.2",
      "bom-ref": "@isaacs/cliui@8.0.2",
      "author": "Ben Coe",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/cliui.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/cliui#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/cliui/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3bc8dc8da6d76a578e1bd0d0d3e0115d66414df9cfe16340ab3ba224aee5978e009b118abff2763384cf8f18d8df39c109fbc15c5cee726d6dc1dc85c9b16a10"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@isaacs/cliui"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "string-width",
          "version": "5.1.2",
          "bom-ref": "@isaacs/cliui@8.0.2|string-width@5.1.2",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@5.1.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "1e72ce091def8dc63c6dea0d2ed723679fe7c67d9a7e6304ea586b0eb79ba24a8c6a9f976de5bc9fd4d7a4f0cea9d18ae6a708de84f418a4d6eb00bb10c895a8"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@isaacs/cliui/node_modules/string-width"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "emoji-regex",
          "version": "9.2.2",
          "bom-ref": "@isaacs/cliui@8.0.2|emoji-regex@9.2.2",
          "author": "Mathias Bynens",
          "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/emoji-regex@9.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/mathiasbynens/emoji-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://mths.be/emoji-regex",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mathiasbynens/emoji-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2f5f03689b17494936fb8da9bfc98bb398c94f686a164144e23db5c0e9a06d4aac67684bef636c514efce60f515e0a37b3464d815978d93887a7766d3affd5ca"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@isaacs/cliui/node_modules/emoji-regex"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "7.1.0",
          "bom-ref": "@isaacs/cliui@8.0.2|strip-ansi@7.1.0",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes from a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@7.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "8aae9e55523ae274104d162ad8ab44836776b94ecb125853270b07e18cc81d9b21c658199acff021ce15a03413946fc8bd522b04a1b4e82ad99e9d2abfb86471"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@isaacs/cliui/node_modules/strip-ansi"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "6.1.0",
          "bom-ref": "@isaacs/cliui@8.0.2|ansi-regex@6.1.0",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@6.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ec7497e1041be02b297222e9545c3245eefd3b7c6c2190c32c4476d6411143bd6868fa1d17c8cbef6e408093050186e8a08aa8949a112ee33cd52a5e524a64bc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@isaacs/cliui/node_modules/ansi-regex"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "wrap-ansi",
          "version": "8.1.0",
          "bom-ref": "@isaacs/cliui@8.0.2|wrap-ansi@8.1.0",
          "author": "Sindre Sorhus",
          "description": "Wordwrap a string with ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wrap-ansi@8.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/wrap-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b22ed0588eb350cab9e9b11216f6a0b66ccc7463ada317d1f927b3d753286df73bb66f9591472493d6d6d9479f7d319551b3a4b31992c34000da0b3c83bd4d09"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@isaacs/cliui/node_modules/wrap-ansi"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-styles",
          "version": "6.2.1",
          "bom-ref": "@isaacs/cliui@8.0.2|ansi-styles@6.2.1",
          "author": "Sindre Sorhus",
          "description": "ANSI escape codes for styling strings in the terminal",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-styles@6.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-styles.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-styles#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-styles/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6cdefdf2015f417faf8b0dd1ef2ac6591aa7acdda84641245238e5e09367e04f06c716e3b46dc56eb108218de5f3f86bc14c0878266f8b842e3933f8304ad5ba"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@isaacs/cliui/node_modules/ansi-styles"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "string-width",
      "version": "4.2.3",
      "bom-ref": "string-width@4.2.3",
      "author": "Sindre Sorhus",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/string-width.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string-width-cjs"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "emoji-regex",
      "version": "8.0.0",
      "bom-ref": "emoji-regex@8.0.0",
      "author": "Mathias Bynens",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mathiasbynens/emoji-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mathiasbynens/emoji-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/emoji-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "bom-ref": "is-fullwidth-code-point@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-fullwidth-code-point"
        }
      ]
    },
    {
      "type": "library",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "bom-ref": "eastasianwidth@0.2.0",
      "author": "Masaki Komagata",
      "description": "Get East Asian Width from a character.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/komagata/eastasianwidth.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/komagata/eastasianwidth#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/komagata/eastasianwidth/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "23cf1361959cf578981d1438ff7739ae38df8248e12f25b696e18885e18445b350e8e63bc93c9b6a74a90d765af32ed550ff589837186be7b2ab871aee22ea58"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eastasianwidth"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-ansi",
      "version": "6.0.1",
      "bom-ref": "BomRef.3lv5k0ajhlo.7s114q1otro",
      "author": "Sindre Sorhus",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/strip-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-ansi-cjs"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "bom-ref": "wrap-ansi@7.0.0",
      "author": "Sindre Sorhus",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/wrap-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrap-ansi-cjs"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "string-width",
      "version": "4.2.3",
      "bom-ref": "BomRef.bdjfpshl9d8.91evsm3i8n",
      "author": "Sindre Sorhus",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/string-width.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string-width"
        }
      ]
    },
    {
      "type": "library",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "bom-ref": "package-json-from-dist@1.0.1",
      "author": "Isaac Z. Schlueter",
      "description": "Load the local package.json from either src or dist folder",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/package-json-from-dist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/package-json-from-dist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/package-json-from-dist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5046484b7fdbcb8382f2f2f73f67535d1113a5e6cb236362239bc8ae3683ff952dae4157fed35bc234d2440182ffeec2028da921c05a4605a670104772c68223"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/package-json-from-dist"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-scurry",
      "version": "1.11.1",
      "bom-ref": "path-scurry@1.11.1",
      "author": "Isaac Z. Schlueter",
      "description": "walk paths fast and efficiently",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/path-scurry.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/path-scurry#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/path-scurry/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5dae0dc35ec54bd02940527dba62e2252e28ac68e6ed9cf052bc1a99c190b874b30f2b61f5ba0a0dac9c61d0dc643baa6004d7c381c55e06aa59372d5bfbf51c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-scurry"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "lru-cache",
          "version": "10.4.3",
          "bom-ref": "path-scurry@1.11.1|lru-cache@10.4.3",
          "author": "Isaac Z. Schlueter",
          "description": "A cache object that deletes the least-recently-used items.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/lru-cache@10.4.3",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-lru-cache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "24d03365c5eb0ade365462ee633d337c0cc37c0bc9596e807d8943050c835790c2948da6e6c0262be3883bbb39f577ec46c587a74da3009ad169d3d1193b7a49"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/path-scurry/node_modules/lru-cache"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "minipass",
      "version": "5.0.0",
      "bom-ref": "minipass@5.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "minimal implementation of a PassThrough stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minipass@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minipass#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minipass/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dc59e362e7a1bfd93aa2f3846f23acc1a7420cf5f5a6209f855f2772662d1ce8ee3f0ca5556b208532e8eeb69b8c2dd1c79c43e070f1f169b5c67305ed2e6a15"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minipass"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "he",
      "version": "1.2.0",
      "bom-ref": "he@1.2.0",
      "author": "Mathias Bynens",
      "description": "A robust HTML entities encoder/decoder with full Unicode support.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mathiasbynens/he.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/he",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mathiasbynens/he/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/he/-/he-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "17fd439d418fa29391662d278be0afac28074391721001d12d2029b9858c9ab6d2c28376327ffb93e1a5dfc8099d1ef2c83664e962d7c221a877524e58d0ca1b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/he"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-yaml",
      "version": "4.1.0",
      "bom-ref": "js-yaml@4.1.0",
      "author": "Vladimir Zapparov",
      "description": "YAML 1.2 parser and serializer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/js-yaml.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c29c59b3d368c596891122462194f20c4698a65d0529203e141f5a262c9e98a84cc24c5083ade1e13d4a2605061e94ea3c33517269982ee82b46326506d5af44"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-yaml"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "argparse",
      "version": "2.0.1",
      "bom-ref": "argparse@2.0.1",
      "description": "CLI arguments parser. Native port of python's argparse.",
      "licenses": [
        {
          "license": {
            "id": "Python-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/argparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/argparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/argparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/argparse"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "log-symbols",
      "version": "4.1.0",
      "bom-ref": "log-symbols@4.1.0",
      "author": "Sindre Sorhus",
      "description": "Colored symbols for various log levels. Example: `✔︎ Success`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/log-symbols@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/log-symbols.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/log-symbols#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/log-symbols/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f173efa4003cbb285fb5ebbca48bd0c69259ed2618769522bd9a46cbab05b01b8a458ffbad019abde75e07c68af99932ababa930554bffd016eaf398cdf4722e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/log-symbols"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-unicode-supported",
      "version": "0.1.0",
      "bom-ref": "is-unicode-supported@0.1.0",
      "author": "Sindre Sorhus",
      "description": "Detect whether the terminal supports Unicode",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-unicode-supported@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-unicode-supported.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-unicode-supported#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-unicode-supported/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "927c46daae140b7bbcb2d446c8054908e771166bf90d989171d94868041701b49f2726be3a1a29368b4b42bb2d061aaeaaee19a6e29b0dcffc4ba9a05e03c53f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-unicode-supported"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "serialize-javascript",
      "version": "6.0.2",
      "bom-ref": "serialize-javascript@6.0.2",
      "author": "Eric Ferraiuolo",
      "description": "Serialize JavaScript to a superset of JSON that includes regular expressions and functions.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/serialize-javascript@6.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/yahoo/serialize-javascript.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yahoo/serialize-javascript",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yahoo/serialize-javascript/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "49a6b5c4f0724d3ab681d7856582cba3e445137e4d1d99006ea65e58d777069ce9a5e562b00aa90e3729f1dc9feae22f12a251778ea37a69b203888521e564f2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/serialize-javascript"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "bom-ref": "strip-json-comments@3.1.1",
      "author": "Sindre Sorhus",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-json-comments.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-json-comments#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-json-comments/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e9f3dcf91e22870a8fe8dfda22fd9fd60307f25395b56407a2a0b8c8aea8483555a1cba602c7c2aa39179ea89832198cc12fe61072e9ed57a196ddea97a9448a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-json-comments"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-flag",
      "version": "4.0.0",
      "bom-ref": "has-flag@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if argv has a specific flag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/has-flag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/has-flag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/has-flag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-flag"
        }
      ]
    },
    {
      "type": "library",
      "name": "workerpool",
      "version": "6.5.1",
      "bom-ref": "workerpool@6.5.1",
      "author": "Jos de Jong",
      "description": "Offload tasks to a pool of workers on node.js and in the browser",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/workerpool@6.5.1",
      "externalReferences": [
        {
          "url": "git://github.com/josdejong/workerpool.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/josdejong/workerpool",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/josdejong/workerpool/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/workerpool/-/workerpool-6.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "16ce1d35872c76961201f5718679752f9cd392c8ef389c6d0b987330d97ed6df41f214c94dd283c99e63bbbced80fcbe7edf6d0455e83a50cd88e4fd5945d994"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/workerpool"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs-parser",
      "version": "21.1.1",
      "bom-ref": "yargs-parser@21.1.1",
      "author": "Ben Coe",
      "description": "the mighty option parser used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@21.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/yargs-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/yargs-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/yargs-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-21.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b55a6c256ec376379c0221696c80757b7ab1210b04e8da0f739fde4ddadb6c80b88742d5b16867a1ade0fa6d87725048ba31f3b31678549540f8652e736fcb07"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yargs-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs-unparser",
      "version": "2.0.0",
      "bom-ref": "yargs-unparser@2.0.0",
      "author": "André Cruz",
      "description": "Converts back a yargs argv object to its original array form",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yargs-unparser@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/yargs-unparser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/yargs-unparser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/yargs-unparser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ee9453200f5073571a6746d9e9161119b1c9b61256b9a91ff969872b4ad578b90daeb1a17e869b04d76e7ba91d20d23aaf889fee872af5a0ff9fbc7028e77338"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yargs-unparser"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "camelcase",
          "version": "6.3.0",
          "bom-ref": "yargs-unparser@2.0.0|camelcase@6.3.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@6.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-6.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "1a6cba161625098eee3849595126f1a365020c7f28c0493df7a8246eba6c806b6b24b33727b8c6c65f4873b430c23e22bce13901665644c79c0dd17b86a1a314"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/yargs-unparser/node_modules/camelcase"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "decamelize",
          "version": "4.0.0",
          "bom-ref": "yargs-unparser@2.0.0|decamelize@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/decamelize@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/decamelize.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/decamelize#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/decamelize/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/decamelize/-/decamelize-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f621353e04a293d1de208c3624ef78222767137781a10ac5277c3bb05bb3497e03a66677bf9b19a54895e52c1c7fa990105f98d2bbbc35ea3ea7e9f287627e85"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/yargs-unparser/node_modules/decamelize"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "flat",
      "version": "5.0.2",
      "bom-ref": "flat@5.0.2",
      "author": "Hugh Kennedy",
      "description": "Take a nested Javascript object and flatten it, or unflatten an object with delimited keys",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/flat@5.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/hughsk/flat.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hughsk/flat",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hughsk/flat/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/flat/-/flat-5.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6fab2e103fb9ff7ad3a5405d1b582ea4897c30f14200c034417c269632e1bc250a714bdd138816932f73a6e1827171ceb33e09f703c6356aba38aa66233cf785"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/flat"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-plain-obj",
      "version": "2.1.0",
      "bom-ref": "is-plain-obj@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if a value is a plain object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-plain-obj@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-plain-obj.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-plain-obj#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-plain-obj/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6169dfc91c312fff92b2b5987cea54b73e5bdd80fe9f27e41ef8db71a9f393cce0c8ee00483ebbb95311b7c9396cce252cc0e75dfae24613a97a6c3e35f4f578"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-plain-obj"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs",
      "version": "17.7.2",
      "bom-ref": "yargs@17.7.2",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yargs@17.7.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/yargs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://yargs.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/yargs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yargs/-/yargs-17.7.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "edd4b3cd143ef822a7348fe4aca9d8455ec928a3d45cc121eb5b286872a0f66ad6121cc55a1167c4fc4697eebd703d4ebbadc2d773543c29e621caefa82b8ceb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yargs"
        }
      ]
    },
    {
      "type": "library",
      "name": "node-redis-dump2",
      "version": "0.6.0",
      "bom-ref": "node-redis-dump2@0.6.0",
      "author": "Stefan Seide",
      "description": "Backup and restore your Redis data written in node.js.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-redis-dump2@0.6.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/sseide/node-redis-dump.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sseide/node-redis-dump#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sseide/node-redis-dump/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-redis-dump2/-/node-redis-dump2-0.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "688aef08c228789d49ad36fa60a170726fdc8d84a0784492cfc7e42726011cabdd4303b80f0ac6e8c0f08946d674a0e8573f6b4ced0c194db5154bdb11fc6cde"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-redis-dump2"
        }
      ]
    },
    {
      "type": "library",
      "name": "underscore",
      "version": "1.13.1",
      "bom-ref": "underscore@1.13.1",
      "author": "Jeremy Ashkenas",
      "description": "JavaScript's functional programming helper library.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/underscore@1.13.1",
      "externalReferences": [
        {
          "url": "git://github.com/jashkenas/underscore.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://underscorejs.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jashkenas/underscore/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.13.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8734a8015b4917edd9b62157d1581f14f1c40d19bb63f40f8c6c8da384d57670d375fb77b6bf211240f6e5ad630be4e34ee13bb641c62a48700a0b3d760041da"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/underscore"
        }
      ]
    },
    {
      "type": "library",
      "name": "nyc",
      "version": "17.1.0",
      "bom-ref": "nyc@17.1.0",
      "author": "Ben Coe",
      "description": "the Istanbul command line interface",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/nyc@17.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/nyc.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/nyc/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/nyc/-/nyc-17.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "538daf438733a4a6b441d23586ef79d17b8d858aa0a0cf991751d3f95b941cbf613df0cf56f350ca5b6632a744f5b5073156bef3235b73740a4e3f33421955c5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/nyc"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "convert-source-map",
          "version": "1.9.0",
          "bom-ref": "nyc@17.1.0|convert-source-map@1.9.0",
          "author": "Thorsten Lorenz",
          "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/convert-source-map@1.9.0",
          "externalReferences": [
            {
              "url": "git://github.com/thlorenz/convert-source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "012141ba9d0ccf5bb28888c035a9f58f32d06a68bdcf53e86126428a2616d857333db7a75dce3915974164bcce4feafafa2722b8432876d982b62fa18da024d0"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/convert-source-map"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "find-up",
          "version": "4.1.0",
          "bom-ref": "nyc@17.1.0|find-up@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file or directory by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/find-up"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "locate-path",
          "version": "5.0.0",
          "bom-ref": "nyc@17.1.0|locate-path@5.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first path that exists on disk of multiple paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/locate-path@5.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/locate-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/locate-path"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-locate",
          "version": "4.1.0",
          "bom-ref": "nyc@17.1.0|p-locate@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the first fulfilled promise that satisfies the provided testing function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-locate@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-locate.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/p-locate"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-limit",
          "version": "2.3.0",
          "bom-ref": "nyc@17.1.0|p-limit@2.3.0",
          "author": "Sindre Sorhus",
          "description": "Run multiple promise-returning & async functions with limited concurrency",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-limit@2.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-limit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/p-limit"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "foreground-child",
          "version": "3.3.0",
          "bom-ref": "nyc@17.1.0|foreground-child@3.3.0",
          "author": "Isaac Z. Schlueter",
          "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/foreground-child@3.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/tapjs/foreground-child.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/tapjs/foreground-child#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/tapjs/foreground-child/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2ddda0f2bac0c8c6055c1844a8ccfc6401c18b8278b92d62fc2c463039e3c8559d74c5cb55c0e9d39d4365fbbeb7bf9a6fb5afe9232aa569b21488f951b7c5be"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/foreground-child"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "signal-exit",
              "version": "4.1.0",
              "bom-ref": "nyc@17.1.0|foreground-child@3.3.0|signal-exit@4.1.0",
              "author": "Ben Coe",
              "description": "when you want to fire an event no matter how a process exits.",
              "licenses": [
                {
                  "license": {
                    "id": "ISC",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/signal-exit@4.1.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/tapjs/signal-exit.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/tapjs/signal-exit#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/tapjs/signal-exit/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "6f3c99d5ef3cc3d3b588d25b2a73a5bd84eb58f0e5e3a3b56c6d03dd7227bfef6d90faf1acdf235144e21650e4926296827d4ce827c8035dd2b86a8e6bd2a8af"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/foreground-child/node_modules/signal-exit"
                },
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "p-map",
          "version": "3.0.0",
          "bom-ref": "nyc@17.1.0|p-map@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Map over promises concurrently",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-map@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-map#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-map/-/p-map-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "777a9755317fb3e5be09d279036f70cb05769fc0904186a1960cf66c5880fb87953496c726874f67efe05f03c68746cea80fa3f12fbaf9c926bcb18f935429c5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/p-map"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs",
          "version": "15.4.1",
          "bom-ref": "nyc@17.1.0|yargs@15.4.1",
          "description": "yargs the modern, pirate-themed, successor to optimist.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs@15.4.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/yargs/yargs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://yargs.js.org/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "69e3dbc4399c616fbe3daa81b09f8761417009dbf82d5bdd9e1072efc139ecf228afcfce56f84cac00c51440e1f031c3151bff3bd8b794f86c10d8ceed05f4f8"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/yargs"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "cliui",
          "version": "6.0.0",
          "bom-ref": "nyc@17.1.0|cliui@6.0.0",
          "author": "Ben Coe",
          "description": "easily create complex multi-column command-line-interfaces",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cliui@6.0.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/cliui.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/cliui#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/cliui/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b7ac1b82da025ef033b2ded0817c4962a3edd2eb047db81075fb443db2cbfdcbefe873c4e5582fa82b80203474360539d9db3aac5c2aae06a434bac712309bad"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/cliui"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "wrap-ansi",
          "version": "6.2.0",
          "bom-ref": "nyc@17.1.0|wrap-ansi@6.2.0",
          "author": "Sindre Sorhus",
          "description": "Wordwrap a string with ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wrap-ansi@6.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/wrap-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "afa94f7011b1657948732984bbb227c43321756d0a0f1a4b82814b720b9ab3109a27f48e219c0835ab4af4a63fb5ff99ae5cb038a5345038f70135d405fc495c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/wrap-ansi"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "y18n",
          "version": "4.0.3",
          "bom-ref": "nyc@17.1.0|y18n@4.0.3",
          "author": "Ben Coe",
          "description": "the bare-bones internationalization library used by yargs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/y18n@4.0.3",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/y18n.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/y18n",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/y18n/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "24a86a4cec12aea340d4d639952ced2751ab06252874b326219b8b88368c449fa2b4577e001544f170633af2162fead2a8d0c2ef82c24859a56ff538519e2125"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/y18n"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs-parser",
          "version": "18.1.3",
          "bom-ref": "nyc@17.1.0|yargs-parser@18.1.3",
          "author": "Ben Coe",
          "description": "the mighty option parser used by yargs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs-parser@18.1.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/yargs/yargs-parser.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a39d23d09793a32ff82ba39971a4265ba9725d72a1abb72c4445dc0f0936a2614f244c1434e56d24abe60ebf442357c025953265c445ee4c460569915ee76b09"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/yargs-parser"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "load-nyc-config",
      "group": "@istanbuljs",
      "version": "1.1.0",
      "bom-ref": "@istanbuljs/load-nyc-config@1.1.0",
      "description": "Utility function to load nyc configuration",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/load-nyc-config.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/load-nyc-config#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/load-nyc-config/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5637874a5233a6ffcdc83dcdd18b877d738f0c88b1700d6ad9957df30b0ca9c6253e6bf69f761bda560ff5730496768555783903b60b4de2eee95f38b900e399"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@istanbuljs/load-nyc-config"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "find-up",
          "version": "4.1.0",
          "bom-ref": "@istanbuljs/load-nyc-config@1.1.0|find-up@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file or directory by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/find-up"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "locate-path",
          "version": "5.0.0",
          "bom-ref": "@istanbuljs/load-nyc-config@1.1.0|locate-path@5.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first path that exists on disk of multiple paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/locate-path@5.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/locate-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/locate-path"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-locate",
          "version": "4.1.0",
          "bom-ref": "@istanbuljs/load-nyc-config@1.1.0|p-locate@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the first fulfilled promise that satisfies the provided testing function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-locate@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-locate.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-locate"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-limit",
          "version": "2.3.0",
          "bom-ref": "@istanbuljs/load-nyc-config@1.1.0|p-limit@2.3.0",
          "author": "Sindre Sorhus",
          "description": "Run multiple promise-returning & async functions with limited concurrency",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-limit@2.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-limit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-limit"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "js-yaml",
          "version": "3.14.1",
          "bom-ref": "@istanbuljs/load-nyc-config@1.1.0|js-yaml@3.14.1",
          "author": "Vladimir Zapparov",
          "description": "YAML 1.2 parser and serializer",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/js-yaml@3.14.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/nodeca/js-yaml.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodeca/js-yaml",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodeca/js-yaml/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "argparse",
          "version": "1.0.10",
          "bom-ref": "@istanbuljs/load-nyc-config@1.1.0|argparse@1.0.10",
          "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/argparse@1.0.10",
          "externalReferences": [
            {
              "url": "git+https://github.com/nodeca/argparse.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodeca/argparse#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodeca/argparse/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/argparse"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "camelcase",
      "version": "5.3.1",
      "bom-ref": "camelcase@5.3.1",
      "author": "Sindre Sorhus",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/camelcase.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/camelcase"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-try",
      "version": "2.2.0",
      "bom-ref": "p-try@2.2.0",
      "author": "Sindre Sorhus",
      "description": "`Start a promise chain",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-try.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-try#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-try/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-try"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-package-type",
      "version": "0.1.0",
      "bom-ref": "get-package-type@0.1.0",
      "author": "Corey Farrell",
      "description": "Determine the `package.json#type` which applies to a location",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-package-type@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/cfware/get-package-type.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cfware/get-package-type#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cfware/get-package-type/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a63cee2ad63ae0661f5a2ccd009d1fafd56ab6d6643622b6892e37d0bb481f38c112be9b5fc026db39b8b16e11a39c23596e5c02544bd6a00c4dc5db8cd00ed9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-package-type"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "sprintf-js",
      "version": "1.0.3",
      "bom-ref": "sprintf-js@1.0.3",
      "author": "Alexandru Marasteanu",
      "description": "JavaScript sprintf implementation",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexei/sprintf.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sprintf-js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "esprima",
      "version": "4.0.1",
      "bom-ref": "esprima@4.0.1",
      "author": "Ariya Hidayat",
      "description": "ECMAScript parsing infrastructure for multipurpose analysis",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jquery/esprima.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://esprima.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jquery/esprima/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esprima"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-from",
      "version": "5.0.0",
      "bom-ref": "resolve-from@5.0.0",
      "author": "Sindre Sorhus",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/resolve-from.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-from#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-from/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a9883d28fdb8743e6a91af49e3b774695932d0df9be1f4d4f3d2cdf620e78c1e706a4b220b8f6bbcc0743eb509406a13987e745cf8aa3af0230df6a28c6c5867"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve-from"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "schema",
      "group": "@istanbuljs",
      "version": "0.1.3",
      "bom-ref": "@istanbuljs/schema@0.1.3",
      "author": "Corey Farrell",
      "description": "Schemas describing various structures used by nyc and istanbuljs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/schema@0.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/schema.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/schema#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/schema/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "657458e2336f56049543c0cbdcb4dc6a4680b57c13554c44f3586c96cc83d80b685d6ff05686f5d0790e2755ffa4095c23b0fed98a192a0e5da3c1bfc3a45880"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@istanbuljs/schema"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "caching-transform",
      "version": "4.0.0",
      "bom-ref": "caching-transform@4.0.0",
      "description": "Wraps a transform and provides caching",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caching-transform@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/caching-transform.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/caching-transform#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/caching-transform/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caching-transform/-/caching-transform-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "929a8ebf05e78e3378e03f3d2b971c402f9152bb32ee307f5cb951af1d03effd8735c4cfab3b1be97818a04af0928e90b15d7ce020366204b57f10e288364c58"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caching-transform"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "hasha",
      "version": "5.2.2",
      "bom-ref": "hasha@5.2.2",
      "author": "Sindre Sorhus",
      "description": "Hashing made simple. Get the hash of a buffer/string/stream/file.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hasha@5.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/hasha.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/hasha#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/hasha/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hasha/-/hasha-5.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1eba79bc82bfc6be5291e376a273b7d87d0c80d6747f5ec744d1f7f567cbd1261434e4d9e4bcf54c9f0f6a3a3ff3b7581841652cc9bb98873f93fb3a06fcfd1d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hasha"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-stream",
      "version": "2.0.1",
      "bom-ref": "is-stream@2.0.1",
      "author": "Sindre Sorhus",
      "description": "Check if something is a Node.js stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-stream@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "845a222624e5eb79e7fa4b2d1c606d7b05922a740ba726f5e7928785e035977f6ebed3bd9d6228a75a77b9da8f71477fc5b17554b30ee27ece23aa7b45b9e00e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-stream"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "type-fest",
      "version": "0.8.1",
      "bom-ref": "type-fest@0.8.1",
      "author": "Sindre Sorhus",
      "description": "A collection of essential TypeScript types",
      "licenses": [
        {
          "expression": "(MIT OR CC0-1.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/type-fest@0.8.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/type-fest.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/type-fest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/type-fest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e1d6f3233aaf8ed822339af0d64e6b107b4100d2a676e7611b20446a3374d5f13285a00886ca0a372eb2efe20df7721fa45b7063d8aa8bb903fb1c0a850b0d24"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type-fest"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "make-dir",
      "version": "3.1.0",
      "bom-ref": "make-dir@3.1.0",
      "author": "Sindre Sorhus",
      "description": "Make a directory and its parents if needed - Think `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/make-dir@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/make-dir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/make-dir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/make-dir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "83715e3f6d0b3708402dbffa0b3e837781769e0cded23cfbb5bceb0f6c0057ea3d15e3477b8acbfb22b699dd09fdf8927f5b1ad400e15ea8b9fa857038cfde1b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/make-dir"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "6.3.1",
          "bom-ref": "make-dir@3.1.0|semver@6.3.1",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@6.3.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/make-dir/node_modules/semver"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "package-hash",
      "version": "4.0.0",
      "bom-ref": "package-hash@4.0.0",
      "author": "Mark Wubben",
      "description": "Generates a hash for an installed npm package, useful for salting caches",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/package-hash@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/novemberborn/package-hash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/novemberborn/package-hash#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/novemberborn/package-hash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/package-hash/-/package-hash-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c217643c8a284aefdb01282067de81595bd94d130e1719f2506e4f9d34862a8244da077999b54d991d8d8f6d10173c58620017a68a82f80897ce5f9431187bcd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/package-hash"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "graceful-fs",
      "version": "4.2.10",
      "bom-ref": "graceful-fs@4.2.10",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/node-graceful-fs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f41ca1b2c4767cf56c3598f8efca9451b29f98bd3eb790435728d286dc9964b88aed90c002b1457e8a723938f4334e70136b493e2b00e224e79d79766283ef38"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/graceful-fs"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.flattendeep",
      "version": "4.4.0",
      "bom-ref": "lodash.flattendeep@4.4.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.flattenDeep` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.flattendeep@4.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.flattendeep/-/lodash.flattendeep-4.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b876891628719897045f7913e08db7001a8a29a949ff30eb0e0d25b05b5cd61fb7bb0e3d4882796deca1c79131551b62dc0bcaa0e2678088fbc73de8ca53dd59"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.flattendeep"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "release-zalgo",
      "version": "1.0.0",
      "bom-ref": "release-zalgo@1.0.0",
      "author": "Mark Wubben",
      "description": "Helps you write code with promise-like chains that can run both synchronously and asynchronously",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/release-zalgo@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/novemberborn/release-zalgo.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/novemberborn/release-zalgo#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/novemberborn/release-zalgo/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/release-zalgo/-/release-zalgo-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8140321d51cf3c2e7076a5ff2c6e0b5ad458b608f1c97efca1a9c535330cc8511f3aa742e78b37784f368a6b9629b39ea9886dd82acd7fae106fcbe09a6b5918"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/release-zalgo"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-error",
      "version": "4.1.1",
      "bom-ref": "es6-error@4.1.1",
      "author": "Ben Youngblood",
      "description": "Easily-extendable error for use with ES6 classes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-error@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/bjyoungblood/es6-error.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/bjyoungblood/es6-error",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bjyoungblood/es6-error/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-error/-/es6-error-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "526ffe17132bf422125a1d1b8b966fd22383fb8705879a8b7a4b35aa1028a4a540270dddae029b2b24a2929ef01a10cbd073de6a36b43f950b66bc4b92789456"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-error"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "write-file-atomic",
      "version": "3.0.3",
      "bom-ref": "write-file-atomic@3.0.3",
      "author": "Rebecca Turner",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/write-file-atomic@3.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/npm/write-file-atomic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/write-file-atomic",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/write-file-atomic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "02f1dcc99e499d27eade2a12ca3ac1907f725b89bb03293cffd332fc30fda2729ebbff787f0acca1c7a63b64002450259e70cdf990d2f998c0479b9ad7f3d5fd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/write-file-atomic"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "imurmurhash",
      "version": "0.1.4",
      "bom-ref": "imurmurhash@0.1.4",
      "author": "Jens Taylor",
      "description": "An incremental implementation of MurmurHash3",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jensyt/imurmurhash-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2665cc67ac2ebc398b88712697dca4cea3ba97015ba1fd061b822470668435d0910c398c5679f2eece47b0880709b6aad30d8cc8f843aa48535204b62d4d8f1c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/imurmurhash"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-typedarray",
      "version": "1.0.0",
      "bom-ref": "is-typedarray@1.0.0",
      "author": "Hugh Kennedy",
      "description": "Detect whether or not an object is a Typed Array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/hughsk/is-typedarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hughsk/is-typedarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hughsk/is-typedarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-typedarray"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "signal-exit",
      "version": "3.0.7",
      "bom-ref": "signal-exit@3.0.7",
      "author": "Ben Coe",
      "description": "when you want to fire an event no matter how a process exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/signal-exit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/signal-exit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/signal-exit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/signal-exit"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "typedarray-to-buffer",
      "version": "3.1.5",
      "bom-ref": "typedarray-to-buffer@3.1.5",
      "author": "Feross Aboukhadijeh",
      "description": "Convert a typed array to a Buffer without a copy",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typedarray-to-buffer@3.1.5",
      "externalReferences": [
        {
          "url": "git://github.com/feross/typedarray-to-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://feross.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/typedarray-to-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cddbbc5cc3440dea4a291f9760e5c054fb56ba2d25cb436da2152c730f9499a1e20164fc86b575aebfff1fa57ed03bc9dce435f52f7bf4cd2568b7d7f2b9bcd9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typedarray-to-buffer"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "decamelize",
      "version": "1.2.0",
      "bom-ref": "decamelize@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/decamelize.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/decamelize"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "find-cache-dir",
      "version": "3.3.2",
      "bom-ref": "find-cache-dir@3.3.2",
      "description": "Finds the common standard cache directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/find-cache-dir@3.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/avajs/find-cache-dir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/avajs/find-cache-dir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/avajs/find-cache-dir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-3.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c17655e5e985123aeb89d220103d753a850a2f18988c072aa2dfcd25d0243a1949faf1b3c213807dc1b9397d633fe4b43dc8c49fc6dd309bfe8368f04373a78a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/find-cache-dir"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "commondir",
      "version": "1.0.1",
      "bom-ref": "commondir@1.0.1",
      "author": "James Halliday",
      "description": "compute the closest common parent for file paths",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-commondir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-commondir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-commondir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5bda40870d236b511d6f91957481759a3670fc0488d0095285733cdd45067b60d5af94dd00f100d4e03c9bf83ccd6a7dc7a3a7ee0aae7d8f856ad0db0b730342"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/commondir"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "pkg-dir",
      "version": "4.2.0",
      "bom-ref": "pkg-dir@4.2.0",
      "author": "Sindre Sorhus",
      "description": "Find the root directory of a Node.js project or npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/pkg-dir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-dir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-dir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1d10f36da2a30be00e5955f1014ff1e7808e19e22ff5e6fee82903490a0d4ede17c96a0826fb8fb178b3c6efc5af6dc489e91bb59c2687521c206fe5fdad7419"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pkg-dir"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "find-up",
          "version": "4.1.0",
          "bom-ref": "pkg-dir@4.2.0|find-up@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file or directory by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pkg-dir/node_modules/find-up"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "locate-path",
          "version": "5.0.0",
          "bom-ref": "pkg-dir@4.2.0|locate-path@5.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first path that exists on disk of multiple paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/locate-path@5.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/locate-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pkg-dir/node_modules/locate-path"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-locate",
          "version": "4.1.0",
          "bom-ref": "pkg-dir@4.2.0|p-locate@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the first fulfilled promise that satisfies the provided testing function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-locate@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-locate.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pkg-dir/node_modules/p-locate"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-limit",
          "version": "2.3.0",
          "bom-ref": "pkg-dir@4.2.0|p-limit@2.3.0",
          "author": "Sindre Sorhus",
          "description": "Run multiple promise-returning & async functions with limited concurrency",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-limit@2.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-limit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pkg-dir/node_modules/p-limit"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "path-key",
      "version": "3.1.1",
      "bom-ref": "path-key@3.1.1",
      "author": "Sindre Sorhus",
      "description": "Get the PATH environment variable key cross-platform",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-key.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-key#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-key/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-key"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "shebang-command",
      "version": "2.0.0",
      "bom-ref": "shebang-command@2.0.0",
      "author": "Kevin Mårtensson",
      "description": "Get the command from a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kevva/shebang-command.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kevva/shebang-command#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kevva/shebang-command/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shebang-command"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "shebang-regex",
      "version": "3.0.0",
      "bom-ref": "shebang-regex@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Regular expression for matching a shebang line",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/shebang-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/shebang-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/shebang-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shebang-regex"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "which",
      "version": "2.0.2",
      "bom-ref": "which@2.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-which.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-which#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-which/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-coverage",
      "version": "3.2.0",
      "bom-ref": "istanbul-lib-coverage@3.2.0",
      "author": "Krishnan Anantheswaran",
      "description": "Data library for istanbul coverage objects",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@3.2.0#packages/istanbul-lib-coverage",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git#packages/istanbul-lib-coverage",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "78e789e411c298762f40aef1b7d1a4747bb3b82192d58ea0f46be7c77626df77f3fc7a4b458c624b4c0736bfa6fcc042f01eb8ed7b7ad3cbc20c4be197d73a33"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-coverage"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-hook",
      "version": "3.0.0",
      "bom-ref": "istanbul-lib-hook@3.0.0",
      "author": "Krishnan Anantheswaran",
      "description": "Hooks for require, vm and script used in istanbul",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-hook@3.0.0#packages/istanbul-lib-hook",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git#packages/istanbul-lib-hook",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3edfee81ed50f6cfb954067ea42a35e9360c58f04897ea1a3488e02d0c5c5f48ad4bab9e79a03ea447d3859a47f16c611600a211bf2c00963a31d50a82221669"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-hook"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "append-transform",
      "version": "2.0.0",
      "bom-ref": "append-transform@2.0.0",
      "author": "James Talmage",
      "description": "Install a transform to `require.extensions` that always runs last, even if additional extensions are added later.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/append-transform@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/append-transform.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/append-transform#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/append-transform/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/append-transform/-/append-transform-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ef27b2084bab44e2d0245bf95e3e251064f2d1ba2bc5ea6316fd60db6a0076a16efff4ab0250e5d4ed4dc71d79487d51a258949a5ea9f1dc095bd8ef66e82186"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/append-transform"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "default-require-extensions",
      "version": "3.0.1",
      "bom-ref": "default-require-extensions@3.0.1",
      "description": "Node's default require extensions as a separate module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/default-require-extensions@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/avajs/default-require-extensions.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/avajs/default-require-extensions#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/avajs/default-require-extensions/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7974c99916e6d9322df4c8164ec387d7012e85ec3a5c665c31e18a0ad2de74883f342b20d6205e3d791c79374ae058a2ee9ce637db46b1984acd9e21ecefdfc7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/default-require-extensions"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-bom",
      "version": "4.0.0",
      "bom-ref": "strip-bom@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip UTF-8 byte order mark (BOM) from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-bom.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-bom#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-bom/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "df1bab16fe6d1208a2df7662f09b69e79c042082d1f5e877e05016d343d97fe2674ac4e657f8a87b04a0425f7b247be08e8446c0f4a1b169be21daf1077e5dd3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-bom"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-instrument",
      "version": "6.0.3",
      "bom-ref": "istanbul-lib-instrument@6.0.3",
      "author": "Krishnan Anantheswaran",
      "description": "Core istanbul API for JS code coverage",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@6.0.3#packages/istanbul-lib-instrument",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git#packages/istanbul-lib-instrument",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-6.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "56d824ecbfd1d891f2c865b4eeca6816507cfe5a6388e2d38cc766b3a00532b698b7705a25aba877f346adf9d51bfcb8231d4912e3113c33c48f6b9afb3cf5fd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-instrument"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "core",
      "group": "@babel",
      "version": "7.26.10",
      "bom-ref": "@babel/core@7.26.10",
      "author": "The Babel Team",
      "description": "Babel compiler core.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.26.10#packages/babel-core",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-core",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-core",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20core%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/core/-/core-7.26.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bccab26fb5c20cc3ef24514e693f64c6d891878d86c25644835fee220b59b214b96bff0e69db947c28bb9329ca81cdd3c3fe94a360fe75bf6a06db608619b1c1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/core"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "convert-source-map",
          "version": "2.0.0",
          "bom-ref": "@babel/core@7.26.10|convert-source-map@2.0.0",
          "author": "Thorsten Lorenz",
          "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/convert-source-map@2.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/thlorenz/convert-source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2afa78e7d1eb576144275080b22d4abbe318de46ac1f5f53172913cf6c5698c7aae9b936354dd75ef7c9f90eb59b4c64b56c2dfb51d261fdc966c4e6b3769126"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@babel/core/node_modules/convert-source-map"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "6.3.1",
          "bom-ref": "@babel/core@7.26.10|semver@6.3.1",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@6.3.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@babel/core/node_modules/semver"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "remapping",
      "group": "@ampproject",
      "version": "2.3.0",
      "bom-ref": "@ampproject/remapping@2.3.0",
      "author": "Justin Ridgewell",
      "description": "Remap sequential sourcemaps through transformations to point at the original source code",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40ampproject/remapping@2.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ampproject/remapping.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ampproject/remapping#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ampproject/remapping/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "df4899b403e0cfe2d3218a1e8afa98a3ce777f4da305849de6e1a71a9905574337c4eb7d68def77ab920600999538df1e157ea7272f15bd2a98374792c2e1863"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@ampproject/remapping"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "gen-mapping",
      "group": "@jridgewell",
      "version": "0.3.8",
      "bom-ref": "@jridgewell/gen-mapping@0.3.8",
      "author": "Justin Ridgewell",
      "description": "Generate source maps",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/gen-mapping.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jridgewell/gen-mapping#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/gen-mapping/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8a601b04691bf9e6d0cb12a0cefe47bb69e644ec680ce5c787cd1ebf17685cd3abbc09d5c7bce29b37353a8e61f5195f578bcf5da13688ce693856ef3820a558"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/gen-mapping"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-array",
      "group": "@jridgewell",
      "version": "1.2.1",
      "bom-ref": "@jridgewell/set-array@1.2.1",
      "author": "Justin Ridgewell",
      "description": "Like a Set, but provides the index of the `key` in the backing array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/set-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jridgewell/set-array#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/set-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "47c80b45365eca9d37ca6ccfffa2e297fdbcb46786133871d6ada4ef4dca19644023555dbcf217746ef4549736a40330dcd03a24a2f986116ed6c257d0c9e7fc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/set-array"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "sourcemap-codec",
      "group": "@jridgewell",
      "version": "1.5.0",
      "bom-ref": "@jridgewell/sourcemap-codec@1.5.0",
      "author": "Rich Harris",
      "description": "Encode/decode sourcemap mappings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemap-codec.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemap-codec#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemap-codec/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "82fdd945a2125377e33c080db2b88146a19640beaab85c74e1830f5bfcc3f1730bb14df69a10826df6cee8a6452e3bd8a4267ccf20c482ab207fe3f03da33b19"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/sourcemap-codec"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "trace-mapping",
      "group": "@jridgewell",
      "version": "0.3.25",
      "bom-ref": "@jridgewell/trace-mapping@0.3.25",
      "author": "Justin Ridgewell",
      "description": "Trace the original position through a source map",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.25",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/trace-mapping.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jridgewell/trace-mapping#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/trace-mapping/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.25.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bcd93a684c326c6b5ac169b2fcfcf09c60ce8c290b5920f6c2abe3186020380c02196c926177d8a31b74d082644c5fbc2dbe7b0f039bdc06b4a3d080a5ea6261"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/trace-mapping"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-uri",
      "group": "@jridgewell",
      "version": "3.1.2",
      "bom-ref": "@jridgewell/resolve-uri@3.1.2",
      "author": "Justin Ridgewell",
      "description": "Resolve a URI relative to an optional base URI",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/resolve-uri.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jridgewell/resolve-uri#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/resolve-uri/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/resolve-uri"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "code-frame",
      "group": "@babel",
      "version": "7.26.2",
      "bom-ref": "@babel/code-frame@7.26.2",
      "author": "The Babel Team",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.26.2#packages/babel-code-frame",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-code-frame",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-code-frame",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.26.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4499481d1b9e420c168ad5a017c39d1581995f7dbc031e4109e98d1a5a877e9967453f444a2f0990596f69561b4be52e6d563a769bfcec5b36bb9336f6234555"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/code-frame"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-validator-identifier",
      "group": "@babel",
      "version": "7.25.9",
      "bom-ref": "@babel/helper-validator-identifier@7.25.9",
      "author": "The Babel Team",
      "description": "Validate identifier/keywords name",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.25.9#packages/babel-helper-validator-identifier",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-validator-identifier",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.25.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "11deb553a5c973709545f904449583cf8749c0a7bb88b9a626c6ce1aef704a5a0d485b6d1d5d08f20e940206fbaa72b9972e5b18b3dde285d997109d00d04e59"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-validator-identifier"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-tokens",
      "version": "4.0.0",
      "bom-ref": "js-tokens@4.0.0",
      "author": "Simon Lydell",
      "description": "A regex that tokenizes JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lydell/js-tokens.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lydell/js-tokens#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lydell/js-tokens/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-tokens"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "picocolors",
      "version": "1.1.1",
      "bom-ref": "picocolors@1.1.1",
      "author": "Alexey Raspopov",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexeyraspopov/picocolors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexeyraspopov/picocolors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexeyraspopov/picocolors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c5c787dac9e1b5be4cf658aa0ec984c39ea57b7efa993664117fe311bfd1c4d1727a036e97b78db250973fd1438ff2dcbb45fc284c8c71e3f69eda5a1eb0c454"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/picocolors"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "generator",
      "group": "@babel",
      "version": "7.27.0",
      "bom-ref": "@babel/generator@7.27.0",
      "author": "The Babel Team",
      "description": "Turns an AST into code.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.27.0#packages/babel-generator",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-generator",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-generator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20generator%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/generator/-/generator-7.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5726ec2afa62375814d6c74c648a7b15caa985554a13072e8f4db1ef7baf7071343d38a1c759e505ca30616843c23a6801746fe37fa00f3ca08069e7d5766157"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/generator"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "parser",
      "group": "@babel",
      "version": "7.27.0",
      "bom-ref": "@babel/parser@7.27.0",
      "author": "The Babel Team",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.27.0#packages/babel-parser",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-parser",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-parser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A+parser+%28babylon%29%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/parser/-/parser-7.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "89a7a9868ef7ff63f3ef0d9e312d10e5ff37fb444a23b8b8c66898781983cdf4556d0b53386ed3b344b81f3255b1330623d91e53cacd7ee66bf0329f4aded8ca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/parser"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "types",
      "group": "@babel",
      "version": "7.27.0",
      "bom-ref": "@babel/types@7.27.0",
      "author": "The Babel Team",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.27.0#packages/babel-types",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-types",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-types",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20types%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/types/-/types-7.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1f8e6cf1f54b6236e1147eb67482775ad989e9148fb7fdc344ed19713d92522622432cf704b55bf400c49cb97dd66ef86903d2dc0cf379a8d91d839a9567b76e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/types"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsesc",
      "version": "3.1.0",
      "bom-ref": "jsesc@3.1.0",
      "author": "Mathias Bynens",
      "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsesc@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mathiasbynens/jsesc.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/jsesc",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mathiasbynens/jsesc/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fec33774ed853b35e3290849ba8d10d7bdf07f628ea3cb7823cbc7cba945f69a14a7b6ca4f4fcd1c4f1f3d7db73f07e19f291faa70b6c51c4e9d5c395ee18868"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsesc"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-compilation-targets",
      "group": "@babel",
      "version": "7.26.5",
      "bom-ref": "@babel/helper-compilation-targets@7.26.5",
      "author": "The Babel Team",
      "description": "Helper functions on Babel compilation targets",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.26.5#packages/babel-helper-compilation-targets",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-compilation-targets",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.26.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "217bb29f9124a2e149b1c203b8517912c892a25b1e99ed6cd02641f90c55ba0a892d898a77123555f2013acb74494bb8ae793667b92a4f09a83b5969dc721f9c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-compilation-targets"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "lru-cache",
          "version": "5.1.1",
          "bom-ref": "@babel/helper-compilation-targets@7.26.5|lru-cache@5.1.1",
          "author": "Isaac Z. Schlueter",
          "description": "A cache object that deletes the least-recently-used items.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/lru-cache@5.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-lru-cache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2a9340450037230bfe8d3034bad51555bae1f8996baf516fd1ee7a186cc014e5cdedd93f16f89a0d6f0b1e62b9d8395c1f858fda7ea023cbcdd5a7ac045828f7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@babel/helper-compilation-targets/node_modules/lru-cache"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "yallist",
          "version": "3.1.1",
          "bom-ref": "@babel/helper-compilation-targets@7.26.5|yallist@3.1.1",
          "author": "Isaac Z. Schlueter",
          "description": "Yet Another Linked List",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yallist@3.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/yallist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/yallist#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/yallist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b850641a58f1f9f663975189c01b67b09dc412e22e05e374efdc9a0033eb365430264bd36c2bc1a90cc2eb0873e4b054fb8772ba4cea14367da96fb4685f1e2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@babel/helper-compilation-targets/node_modules/yallist"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "6.3.1",
          "bom-ref": "@babel/helper-compilation-targets@7.26.5|semver@6.3.1",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@6.3.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@babel/helper-compilation-targets/node_modules/semver"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "compat-data",
      "group": "@babel",
      "version": "7.26.8",
      "bom-ref": "@babel/compat-data@7.26.8",
      "author": "The Babel Team",
      "description": "The compat-data to determine required Babel plugins",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.26.8#packages/babel-compat-data",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-compat-data",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.26.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a07e543cb3164772f6c0414b9c52754d95ea1ee7e24ca0222dfab0e739214b874a5cb275d32573b5f8a5fedc06f040d303817fb6f54dc3d9ce97864cb2507cad"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/compat-data"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-validator-option",
      "group": "@babel",
      "version": "7.25.9",
      "bom-ref": "@babel/helper-validator-option@7.25.9",
      "author": "The Babel Team",
      "description": "Validate plugin/preset options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.25.9#packages/babel-helper-validator-option",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-validator-option",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.25.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7bfcefd5ca3ca69e7974d744702ca77e3f57ee7c942945e8504c1f5ea699b74a2654e9837bda0e4dd292b47e06980c3acf1305b39d196b2b8c7c70ca94eed37f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-validator-option"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserslist",
      "version": "4.24.4",
      "bom-ref": "browserslist@4.24.4",
      "author": "Andrey Sitnik",
      "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserslist@4.24.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserslist/browserslist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserslist/browserslist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserslist/browserslist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-4.24.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2838b5372d6049e3e2d6f9b4ab8a31485f1be03478e0617805b992d987613cb384a9df290ef8993861ff1ac991c28589dbee4baf4f395fb9daa303302870c6d4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserslist"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "caniuse-lite",
      "version": "1.0.30001699",
      "bom-ref": "caniuse-lite@1.0.30001699",
      "author": "Ben Briggs",
      "description": "A smaller version of caniuse-db, with only the essentials!",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001699",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserslist/caniuse-lite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserslist/caniuse-lite#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserslist/caniuse-lite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001699.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6feb87e416a45d9f43a3d88af8290399cb54484a9997e48fd39eaf739bac6b43cbf9ebf9387c34d37ad95dc9e3343bf72fc3f98faaf04fa0b404f2928a45b4f3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caniuse-lite"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "electron-to-chromium",
      "version": "1.5.97",
      "bom-ref": "electron-to-chromium@1.5.97",
      "author": "Kilian Valkhof",
      "description": "Provides a list of electron-to-chromium version mappings",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.5.97",
      "externalReferences": [
        {
          "url": "git+https://github.com/kilian/electron-to-chromium.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kilian/electron-to-chromium#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kilian/electron-to-chromium/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.97.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1ca2ed687d366ae80ced939d611b8ed7dad60de63e4122755719d715afd70c52dfd3b1ef33dd2900b209160acef9455a6a3237f9a24c329a23a144cb67243b25"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/electron-to-chromium"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "node-releases",
      "version": "2.0.19",
      "bom-ref": "node-releases@2.0.19",
      "author": "Sergey Rubanov",
      "description": "Node.js releases data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.19",
      "externalReferences": [
        {
          "url": "git+https://github.com/chicoxyzzy/node-releases.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chicoxyzzy/node-releases#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chicoxyzzy/node-releases/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.19.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c7139626c04ab7302aec363427e0d3ceecf9f0af1eeec25b760c246cc5907bc51807a7a49ac438e6ad0cfed243b0669999b0be97b9f9ed457c1e5e6d1f13bdbb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-releases"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "update-browserslist-db",
      "version": "1.1.2",
      "bom-ref": "update-browserslist-db@1.1.2",
      "author": "Andrey Sitnik",
      "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/update-browserslist-db@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserslist/update-db.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserslist/update-db#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserslist/update-db/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3cfca9026e6abe50fb5cc642dc1ba379c9da3b1c21aeda0547e0ea924e406bfe83b2c887d226caa247ad6a3f70f0b3fb0689edd6b61ea15e699710fb45310f46"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/update-browserslist-db"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "escalade",
      "version": "3.2.0",
      "bom-ref": "escalade@3.2.0",
      "author": "Luke Edwards",
      "description": "A tiny (183B to 210B) and fast utility to ascend parent directories",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escalade@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lukeed/escalade.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lukeed/escalade#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lukeed/escalade/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5948f6aa5c5a42d3b883a3eae5cdbd193716183c9df22b4bf334e58a98040b3dc97ac02288e2a8b5df0953aa2d0773c00a01bac64254c9585ba0c4be6e37bf8c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escalade"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-module-transforms",
      "group": "@babel",
      "version": "7.26.0",
      "bom-ref": "@babel/helper-module-transforms@7.26.0",
      "author": "The Babel Team",
      "description": "Babel helper functions for implementing ES6 module transformations",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.26.0#packages/babel-helper-module-transforms",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-module-transforms",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-module-transforms",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.26.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c4efb1bba0792b67331274327ba04703b0e89451664b72c1eecb4764568e2dbd690303b51d62d2f1f5c0f9e874036c88be5b4f566c7778d34304903648b1d717"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-module-transforms"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-module-imports",
      "group": "@babel",
      "version": "7.25.9",
      "bom-ref": "@babel/helper-module-imports@7.25.9",
      "author": "The Babel Team",
      "description": "Babel helper functions for inserting module loads",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.25.9#packages/babel-helper-module-imports",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-module-imports",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-module-imports",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.25.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b67500e11b2b99f94833a5ba4454cb1525c84ed974c0a8e0a672e05f2a30a1c54fadb62b2d45d20570e04ecf0195b988cc876507249142320d62cd8102488bb7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-module-imports"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "traverse",
      "group": "@babel",
      "version": "7.27.0",
      "bom-ref": "@babel/traverse@7.27.0",
      "author": "The Babel Team",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.27.0#packages/babel-traverse",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-traverse",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-traverse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20traverse%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d7d958645cd85509241e49780b2e16ac055ca81920bd5d983364d4df11ba0c8c0eecedde71b0cf7d6df23376e300672a7101e2f820ad8cc477748107c6c77a6c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/traverse"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "helpers",
      "group": "@babel",
      "version": "7.27.0",
      "bom-ref": "@babel/helpers@7.27.0",
      "author": "The Babel Team",
      "description": "Collection of helper functions used by Babel transforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.27.0#packages/babel-helpers",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helpers",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helpers",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5397b23ff09314fb8d137aa4f9664cc45929ff8cd4cdd71e4257f37fb0dd19d869f857b377b1c3fa2f18db866e4cc297df040195de38f638a36c6aba39d18d42"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helpers"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "template",
      "group": "@babel",
      "version": "7.27.0",
      "bom-ref": "@babel/template@7.27.0",
      "author": "The Babel Team",
      "description": "Generate an AST from a string template.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.27.0#packages/babel-template",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-template",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-template",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20template%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/template/-/template-7.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "da771ebde9c1a9723aa9132e90f957c072877210bb47232ebb8c6fe4905745f38655c4f2d665c20f5daaae9ec9b28c65975115dfef6c1381ae8015518d3da314"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/template"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "globals",
      "version": "11.12.0",
      "bom-ref": "globals@11.12.0",
      "author": "Sindre Sorhus",
      "description": "Global identifiers from different JavaScript environments",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/globals@11.12.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/globals.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/globals#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/globals/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "58e069fc410652222c252a7bc1cbffcba30efa557d5289dc5aac6e15f9bc781c3358d8327c177a1b3f8878a43d8c29b28681fdf60d793374fe41a5471638b354"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/globals"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-string-parser",
      "group": "@babel",
      "version": "7.25.9",
      "bom-ref": "@babel/helper-string-parser@7.25.9",
      "author": "The Babel Team",
      "description": "A utility package to parse strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.25.9#packages/babel-helper-string-parser",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-string-parser",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.25.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e00fd20abff628b7798ebb4e305cda2a356d01e8b7fb6aff34286804da19dc4c8fffe1a58686841a858e6549859a82133fbcce2721c8326f8361177ca373ef1c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-string-parser"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "bom-ref": "gensync@1.0.0-beta.2",
      "author": "Logan Smyth",
      "description": "Allows users to use generators in order to write common functions that can be both sync or async.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/loganfsmyth/gensync.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/loganfsmyth/gensync",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/loganfsmyth/gensync/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "de137b35ab2462f3032d0639e609d6dcd43e99eb0401ea53aa583e5446e3ef3cea10c055361cdc19861ea85a3f4e5633e9e42215ca751dcb0264efa71a04bcce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gensync"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-processinfo",
      "version": "2.0.3",
      "bom-ref": "istanbul-lib-processinfo@2.0.3",
      "description": "A utility for managing the `processinfo` folder that NYC uses.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-processinfo@2.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/istanbul-lib-processinfo.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbul-lib-processinfo#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbul-lib-processinfo/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-processinfo/-/istanbul-lib-processinfo-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "364c076e8dc4d34a326d7e8d1898ba6abd01dbdbf1caf370a02ede2781b862adbc51f63be7c1e09ff85e57c5511617af3c40f82d77c5cf40d0f33ff4930f7332"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-processinfo"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "p-map",
          "version": "3.0.0",
          "bom-ref": "istanbul-lib-processinfo@2.0.3|p-map@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Map over promises concurrently",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-map@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-map#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-map/-/p-map-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "777a9755317fb3e5be09d279036f70cb05769fc0904186a1960cf66c5880fb87953496c726874f67efe05f03c68746cea80fa3f12fbaf9c926bcb18f935429c5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/istanbul-lib-processinfo/node_modules/p-map"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "archy",
      "version": "1.0.0",
      "bom-ref": "archy@1.0.0",
      "author": "James Halliday",
      "description": "render nested hierarchies `npm ls` style with unicode pipes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-archy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-archy#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-archy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e0fbd4700a0ff4a77dad78a74630f4cf9d55ca0f4c370df1e71537e2728cec020b2fab65de9cf26afcc629cf343fbfcceb3b2267e83b37f550382480f015fab"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/archy"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "aggregate-error",
      "version": "3.1.0",
      "bom-ref": "aggregate-error@3.1.0",
      "author": "Sindre Sorhus",
      "description": "Create an error from multiple errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/aggregate-error@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/aggregate-error.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/aggregate-error#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/aggregate-error/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e08ed3774d6ab96fd1a6871f35ac85745564d6a4aea21d04ec9adb449d7a9c7d351e128543cf0836af5277e9ddef6cea4724a5afd0660c0f3194427abc932b60"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/aggregate-error"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "rimraf",
      "version": "3.0.2",
      "bom-ref": "rimraf@3.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/rimraf@3.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/rimraf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/rimraf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/rimraf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rimraf"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "uuid",
      "version": "8.3.2",
      "bom-ref": "uuid@8.3.2",
      "description": "RFC4122 (v1, v4, and v5) UUIDs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uuid@8.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/uuidjs/uuid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/uuidjs/uuid#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/uuidjs/uuid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f8d62cd9078c5b2f865853849bdc679fa1c20e9d25ed0043ee697cccb52627ef77439345d0da1c12b9f09139175453625f7fdfa42e9a7d2f0385bfe0cfb47b7a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uuid"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-report",
      "version": "3.0.0",
      "bom-ref": "istanbul-lib-report@3.0.0",
      "author": "Krishnan Anantheswaran",
      "description": "Base reporting library for istanbul",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@3.0.0#packages/istanbul-lib-report",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git#packages/istanbul-lib-report",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c1c762fae00acdf8864f669b3e9299d21494d6b1908d44272efb58e4ca50ed00936a10f754e0e172ee3071f63562d9066830f9caec9d38b20d5ec7dbbacf513b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-report"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-source-maps",
      "version": "4.0.1",
      "bom-ref": "istanbul-lib-source-maps@4.0.1",
      "author": "Krishnan Anantheswaran",
      "description": "Source maps support for istanbul",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@4.0.1#packages/istanbul-lib-source-maps",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git#packages/istanbul-lib-source-maps",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9f7b3c13091d1482421b704f28162fb248171a8cbcf00473bde8248ad93ad0dc5177096d2ce4da1fb09488c457bf0628ae5d10ef5da212371607e7cafccad657"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-source-maps"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "source-map",
          "version": "0.6.1",
          "bom-ref": "istanbul-lib-source-maps@4.0.1|source-map@0.6.1",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.6.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/istanbul-lib-source-maps/node_modules/source-map"
            },
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-reports",
      "version": "3.1.5",
      "bom-ref": "istanbul-reports@3.1.5",
      "author": "Krishnan Anantheswaran",
      "description": "istanbul reports",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-reports@3.1.5#packages/istanbul-reports",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git#packages/istanbul-reports",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9d4b0431af6906dfcd387a9b71b789120a88958fcaeeb556517e8baa5da8ad8e5ef6ba103ad85b477bed638cf37f6a2b3c42e0f347e7c7193dcd4c8f960c03d7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-reports"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "html-escaper",
      "version": "2.0.2",
      "bom-ref": "html-escaper@2.0.2",
      "author": "Andrea Giammarchi",
      "description": "fast and safe way to escape and unescape &<>'\" chars",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/html-escaper@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/WebReflection/html-escaper.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/WebReflection/html-escaper",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/WebReflection/html-escaper/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1f688cb5dd08e0cb7979889aa517480e3a7e5f37a55d0d2d144e094bb605c057af5d73263a9f66c8dad4bc28340fac2cf22aa444f05f28781bc228354a694b7e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/html-escaper"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "node-preload",
      "version": "0.2.1",
      "bom-ref": "node-preload@0.2.1",
      "author": "Corey Farrell",
      "description": "Request that Node.js child processes preload modules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-preload@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/cfware/node-preload.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cfware/node-preload#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cfware/node-preload/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-preload/-/node-preload-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "44ce68c81cb8e5c2c4a07a827a1f8c36e140c4ed2f4c504bb24bd06ce2a7104ed84d348de2d6cdf1058320f43a2fe5af2ac07fa8b106a587b6659f5de16f4e21"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-preload"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "process-on-spawn",
      "version": "1.0.0",
      "bom-ref": "process-on-spawn@1.0.0",
      "author": "Corey Farrell",
      "description": "Execute callbacks when child processes are spawned",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/process-on-spawn@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/cfware/process-on-spawn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cfware/process-on-spawn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cfware/process-on-spawn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/process-on-spawn/-/process-on-spawn-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d56b0f0ec512326647e4b78c2de82a90f0ebb0682c5b09351318a9cb686f074a3f174012cdba4872d48271920ad72909bed4c950b107fb6d163858ccbc69c24e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/process-on-spawn"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "clean-stack",
      "version": "2.2.0",
      "bom-ref": "clean-stack@2.2.0",
      "author": "Sindre Sorhus",
      "description": "Clean up error stack traces",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/clean-stack@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/clean-stack.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/clean-stack#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/clean-stack/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e1d882f4769313e29100c5a10e1ac63840a0599c687af31ce5396439b32a352b1553ad8f6335d9fd23138f3c8600517562eb20c46712593117061a7408fc10d4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/clean-stack"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "indent-string",
      "version": "4.0.0",
      "bom-ref": "indent-string@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Indent each line in a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/indent-string@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/indent-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/indent-string#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/indent-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "11d0c366ee00d8ec882bb2ebff6cc6fb0e6399bba4d435419c4c11110bc1ceca412640846d16bc1b153596085871a1890a745689b8c35e5abbefd5f5ff2e71c2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/indent-string"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "fromentries",
      "version": "1.3.2",
      "bom-ref": "fromentries@1.3.2",
      "author": "Feross Aboukhadijeh",
      "description": "Object.fromEntries() ponyfill (in 6 lines)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fromentries@1.3.2",
      "externalReferences": [
        {
          "url": "git://github.com/feross/fromentries.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/fromentries",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/fromentries/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fromentries/-/fromentries-1.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7071291101d48347fc5ddb5909cd99021ac7ccacd3d0cac551372fc7e85fc58bbbac630373948aa17161fa7e188a0c6c1d747373a3ab0ac85d4756d61fa1c7ca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fromentries"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "spawn-wrap",
      "version": "2.0.0",
      "bom-ref": "spawn-wrap@2.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Wrap all spawned Node.js child processes by adding environs and arguments ahead of the main JavaScript file argument.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/spawn-wrap@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/spawn-wrap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/spawn-wrap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/spawn-wrap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "11e6a33637cdf7332750b2f085965053719606814d91b9e04d43df69ac13e1190c8af893c5c5f4a9f8556c67b2dfd99f72d7c31e45adb9e72043c3497324161e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spawn-wrap"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "foreground-child",
      "version": "2.0.0",
      "bom-ref": "foreground-child@2.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Run a child as if it's the foreground process.  Give it stdio.  Exit when it exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/foreground-child@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/foreground-child.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/foreground-child#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/foreground-child/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "74222af45a447324325ca0a4cb39a53d314d82b0b33ee74e7be9a1bc9539cc0b65067195cb6c8ac6d7ecc4adad4014e1c2adb6e6372f063a70d46af8d2ecd908"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/foreground-child"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-windows",
      "version": "1.0.2",
      "bom-ref": "is-windows@1.0.2",
      "author": "Jon Schlinkert",
      "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-windows.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-windows",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-windows/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7972b55089ead9b3e68f25fa7b754723330ba1b73827de22e005a7f87a6adce5392a4ad10bde8e01c4773d127fa46bba9bc4d19c11cff5d917415b13fc239520"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-windows"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "isexe",
      "version": "2.0.0",
      "bom-ref": "isexe@2.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/isexe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/isexe#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/isexe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isexe"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "test-exclude",
      "version": "6.0.0",
      "bom-ref": "test-exclude@6.0.0",
      "author": "Ben Coe",
      "description": "test for inclusion or exclusion of paths using globs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/test-exclude@6.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/test-exclude.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/test-exclude/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7001963c8c8e1d4eb396683cf23c26ed54725e730dee257af0e1806d80e4fcc87fc42fe9cd53e542d63a9e0a081ffe7fb5c8ae8467ef11253c1ab1eb7310f9eb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/test-exclude"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-caller-file",
      "version": "2.0.5",
      "bom-ref": "get-caller-file@2.0.5",
      "author": "Stefan Penner",
      "description": "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/stefanpenner/get-caller-file.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stefanpenner/get-caller-file#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stefanpenner/get-caller-file/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-caller-file"
        }
      ]
    },
    {
      "type": "library",
      "name": "require-directory",
      "version": "2.1.1",
      "bom-ref": "require-directory@2.1.1",
      "author": "Troy Goode",
      "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/troygoode/node-require-directory.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/troygoode/node-require-directory/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/troygoode/node-require-directory/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/require-directory"
        }
      ]
    },
    {
      "type": "library",
      "name": "require-main-filename",
      "version": "2.0.0",
      "bom-ref": "require-main-filename@2.0.0",
      "author": "Ben Coe",
      "description": "shim for require.main.filename() that works in as many environments as possible",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/require-main-filename@2.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/require-main-filename.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/require-main-filename#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/require-main-filename/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "34a37990c0f294aba577160b4947eb6e8e53bb387885dfb613c34f3d7d36999b67d55b911104e861efd9765272f89dee0a97da886174e5eec1f16d225db4079a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/require-main-filename"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-blocking",
      "version": "2.0.0",
      "bom-ref": "set-blocking@2.0.0",
      "author": "Ben Coe",
      "description": "set blocking stdio and stderr ensuring that terminal output does not truncate",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/set-blocking.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/set-blocking#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/set-blocking/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-blocking"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-module",
      "version": "2.0.0",
      "bom-ref": "which-module@2.0.0",
      "author": "nexdrew",
      "description": "Find the module object for something that was require()d",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-module@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/nexdrew/which-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nexdrew/which-module#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nexdrew/which-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "07e7a75a19b0e9c8df542ee44bc3e3f690ab292739b7102b47269819ed3cf2c86ffc51961fed118f1ff13e0b6c59fb14b52dbb1643faf7b1380c3860ae0a1cd1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-module"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "opener",
      "version": "1.5.2",
      "bom-ref": "opener@1.5.2",
      "author": "Domenic Denicola",
      "description": "Opens stuff, like webpages and files and executables, cross-platform",
      "licenses": [
        {
          "expression": "(WTFPL OR MIT)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/opener@1.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/domenic/opener.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/domenic/opener#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/domenic/opener/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/opener/-/opener-1.5.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "babe5421dcb0e58ef2123f702f386a5e2cba199dccc31d32188fb9b0c9f6af4374bf770a26f526147e723cff965e1f5ed317f2cf2257f790fc974f3c0cd163ec"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/opener"
        }
      ]
    },
    {
      "type": "library",
      "name": "readline-browserify",
      "version": "0.0.4",
      "bom-ref": "readline-browserify@0.0.4",
      "author": "Joe Ferner",
      "description": "Readline implementation for browserify.",
      "purl": "pkg:npm/readline-browserify@0.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/nearinfinity/node-readline-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nearinfinity/node-readline-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nearinfinity/node-readline-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readline-browserify/-/readline-browserify-0.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d4367efe1e74881ea9deb836f69a608b885ffc7c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readline-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-js",
      "version": "3.19.3",
      "bom-ref": "uglify-js@3.19.3",
      "author": "Mihai Bazon",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@3.19.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mishoo/UglifyJS.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mishoo/UglifyJS#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mishoo/UglifyJS/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bf75eefb2bb00578aca7a4184dc1f851b1fec58257aa7ab69bf2ed41558a5b361cd627a16272e2c6840337d147ebf8fdfe8c9b7dde96f46870925f3e50c29329"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-js"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ]
    },
    {
      "type": "library",
      "name": "cliui",
      "version": "8.0.1",
      "bom-ref": "cliui@8.0.1",
      "author": "Ben Coe",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cliui@8.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/cliui.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/cliui#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/cliui/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "05278d9f2bacef90b8fff350f6042dd7f72c4d7ca8ffc49bf9a7cb024cc0a6d16e32ca1df4716890636e759a62fe8415ef786754afac47ee4f55131df83afb61"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cliui"
        }
      ]
    },
    {
      "type": "library",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "bom-ref": "BomRef.f3brllupcfg.tfcordl7kb",
      "author": "Sindre Sorhus",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/wrap-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrap-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "y18n",
      "version": "5.0.8",
      "bom-ref": "y18n@5.0.8",
      "author": "Ben Coe",
      "description": "the bare-bones internationalization library used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/y18n@5.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/y18n.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/y18n",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/y18n/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/y18n/-/y18n-5.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d297c5cde81e0d62472480264cb44fd83c078dd179b3b8e8f6dbb3b5d43102120d09dbd2fb79c620da8f774d00a61a8947fd0b8403544baffeed209bf7c60e7c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/y18n"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "redis-commander@0.9.0",
      "dependsOn": [
        "@cyclonedx/bom@4.1.0",
        "async@3.2.6",
        "bcryptjs@2.4.3",
        "body-parser@1.20.3",
        "browserify@17.0.0",
        "chai@4.5.0",
        "clipboard@2.0.11",
        "cmdparser@0.1.0",
        "config@3.3.12",
        "dateformat@3.0.3",
        "ejs@3.1.10",
        "express-partials@0.3.0",
        "express@4.21.2",
        "inflection@1.13.4",
        "ioredis@5.5.0",
        "jquery.json-viewer@1.5.0",
        "jsonwebtoken@9.0.2",
        "jstree@3.3.17",
        "lodash.isequal@4.5.0",
        "lossless-json@1.0.5",
        "mocha-junit-reporter@2.2.1",
        "mocha@11.1.0",
        "node-redis-dump2@0.6.0",
        "nyc@17.1.0",
        "opener@1.5.2",
        "readline-browserify@0.0.4",
        "uglify-js@3.19.3",
        "yargs@17.7.2"
      ]
    },
    {
      "ref": "@cyclonedx/bom@4.1.0"
    },
    {
      "ref": "async@3.2.6"
    },
    {
      "ref": "bcryptjs@2.4.3"
    },
    {
      "ref": "body-parser@1.20.3",
      "dependsOn": [
        "bytes@3.1.2",
        "content-type@1.0.5",
        "body-parser@1.20.3|debug@2.6.9",
        "depd@2.0.0",
        "destroy@1.2.0",
        "http-errors@2.0.0",
        "iconv-lite@0.4.24",
        "on-finished@2.4.1",
        "qs@6.13.0",
        "raw-body@2.5.2",
        "type-is@1.6.18",
        "unpipe@1.0.0"
      ]
    },
    {
      "ref": "body-parser@1.20.3|debug@2.6.9",
      "dependsOn": [
        "body-parser@1.20.3|ms@2.0.0"
      ]
    },
    {
      "ref": "body-parser@1.20.3|ms@2.0.0"
    },
    {
      "ref": "bytes@3.1.2"
    },
    {
      "ref": "content-type@1.0.5"
    },
    {
      "ref": "depd@2.0.0"
    },
    {
      "ref": "destroy@1.2.0"
    },
    {
      "ref": "http-errors@2.0.0",
      "dependsOn": [
        "depd@2.0.0",
        "inherits@2.0.4",
        "setprototypeof@1.2.0",
        "statuses@2.0.1",
        "toidentifier@1.0.1"
      ]
    },
    {
      "ref": "inherits@2.0.4"
    },
    {
      "ref": "setprototypeof@1.2.0"
    },
    {
      "ref": "statuses@2.0.1"
    },
    {
      "ref": "toidentifier@1.0.1"
    },
    {
      "ref": "iconv-lite@0.4.24",
      "dependsOn": [
        "safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "safer-buffer@2.1.2"
    },
    {
      "ref": "on-finished@2.4.1",
      "dependsOn": [
        "ee-first@1.1.1"
      ]
    },
    {
      "ref": "ee-first@1.1.1"
    },
    {
      "ref": "qs@6.13.0",
      "dependsOn": [
        "side-channel@1.0.6"
      ]
    },
    {
      "ref": "side-channel@1.0.6",
      "dependsOn": [
        "call-bind@1.0.7",
        "es-errors@1.3.0",
        "get-intrinsic@1.2.4",
        "object-inspect@1.13.2"
      ]
    },
    {
      "ref": "call-bind@1.0.7",
      "dependsOn": [
        "es-define-property@1.0.0",
        "es-errors@1.3.0",
        "function-bind@1.1.2",
        "get-intrinsic@1.2.4",
        "set-function-length@1.2.2"
      ]
    },
    {
      "ref": "es-define-property@1.0.0",
      "dependsOn": [
        "get-intrinsic@1.2.4"
      ]
    },
    {
      "ref": "get-intrinsic@1.2.4",
      "dependsOn": [
        "es-errors@1.3.0",
        "function-bind@1.1.2",
        "has-proto@1.0.3",
        "has-symbols@1.0.3",
        "hasown@2.0.2"
      ]
    },
    {
      "ref": "es-errors@1.3.0"
    },
    {
      "ref": "function-bind@1.1.2"
    },
    {
      "ref": "set-function-length@1.2.2",
      "dependsOn": [
        "define-data-property@1.1.4",
        "es-errors@1.3.0",
        "function-bind@1.1.2",
        "get-intrinsic@1.2.4",
        "gopd@1.0.1",
        "has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "define-data-property@1.1.4",
      "dependsOn": [
        "es-define-property@1.0.0",
        "es-errors@1.3.0",
        "gopd@1.0.1"
      ]
    },
    {
      "ref": "gopd@1.0.1",
      "dependsOn": [
        "get-intrinsic@1.2.4"
      ]
    },
    {
      "ref": "has-property-descriptors@1.0.2",
      "dependsOn": [
        "es-define-property@1.0.0"
      ]
    },
    {
      "ref": "has-proto@1.0.3"
    },
    {
      "ref": "has-symbols@1.0.3"
    },
    {
      "ref": "hasown@2.0.2",
      "dependsOn": [
        "function-bind@1.1.2"
      ]
    },
    {
      "ref": "object-inspect@1.13.2"
    },
    {
      "ref": "raw-body@2.5.2",
      "dependsOn": [
        "bytes@3.1.2",
        "http-errors@2.0.0",
        "iconv-lite@0.4.24",
        "unpipe@1.0.0"
      ]
    },
    {
      "ref": "unpipe@1.0.0"
    },
    {
      "ref": "type-is@1.6.18",
      "dependsOn": [
        "media-typer@0.3.0",
        "mime-types@2.1.35"
      ]
    },
    {
      "ref": "media-typer@0.3.0"
    },
    {
      "ref": "mime-types@2.1.35",
      "dependsOn": [
        "mime-db@1.52.0"
      ]
    },
    {
      "ref": "mime-db@1.52.0"
    },
    {
      "ref": "browserify@17.0.0",
      "dependsOn": [
        "assert@1.5.0",
        "browser-pack@6.1.0",
        "browser-resolve@2.0.0",
        "browserify-zlib@0.2.0",
        "buffer@5.2.1",
        "cached-path-relative@1.1.0",
        "concat-stream@1.6.2",
        "console-browserify@1.2.0",
        "constants-browserify@1.0.0",
        "crypto-browserify@3.12.0",
        "defined@1.0.0",
        "deps-sort@2.0.1",
        "domain-browser@1.2.0",
        "duplexer2@0.1.4",
        "events@3.3.0",
        "glob@7.2.0",
        "has@1.0.3",
        "htmlescape@1.1.1",
        "https-browserify@1.0.0",
        "inherits@2.0.4",
        "insert-module-globals@7.2.1",
        "JSONStream@1.3.5",
        "labeled-stream-splicer@2.0.2",
        "mkdirp-classic@0.5.3",
        "module-deps@6.2.3",
        "os-browserify@0.3.0",
        "parents@1.0.1",
        "path-browserify@1.0.1",
        "process@0.11.10",
        "punycode@1.4.1",
        "querystring-es3@0.2.1",
        "read-only-stream@2.0.0",
        "readable-stream@2.3.7",
        "resolve@1.20.0",
        "shasum-object@1.0.0",
        "shell-quote@1.7.3",
        "stream-browserify@3.0.0",
        "stream-http@3.2.0",
        "string_decoder@1.1.1",
        "subarg@1.0.0",
        "syntax-error@1.4.0",
        "through2@2.0.5",
        "timers-browserify@1.4.2",
        "tty-browserify@0.0.1",
        "url@0.11.0",
        "util@0.12.3",
        "vm-browserify@1.1.2",
        "xtend@4.0.2"
      ]
    },
    {
      "ref": "assert@1.5.0",
      "dependsOn": [
        "object-assign@4.1.1",
        "assert@1.5.0|util@0.10.3"
      ]
    },
    {
      "ref": "assert@1.5.0|util@0.10.3",
      "dependsOn": [
        "assert@1.5.0|inherits@2.0.1"
      ]
    },
    {
      "ref": "assert@1.5.0|inherits@2.0.1"
    },
    {
      "ref": "object-assign@4.1.1"
    },
    {
      "ref": "browser-pack@6.1.0",
      "dependsOn": [
        "combine-source-map@0.8.0",
        "defined@1.0.0",
        "JSONStream@1.3.5",
        "safe-buffer@5.1.2",
        "through2@2.0.5",
        "umd@3.0.3"
      ]
    },
    {
      "ref": "combine-source-map@0.8.0",
      "dependsOn": [
        "convert-source-map@1.1.3",
        "inline-source-map@0.6.2",
        "lodash.memoize@3.0.4",
        "source-map@0.5.7"
      ]
    },
    {
      "ref": "convert-source-map@1.1.3"
    },
    {
      "ref": "inline-source-map@0.6.2",
      "dependsOn": [
        "source-map@0.5.7"
      ]
    },
    {
      "ref": "source-map@0.5.7"
    },
    {
      "ref": "lodash.memoize@3.0.4"
    },
    {
      "ref": "defined@1.0.0"
    },
    {
      "ref": "JSONStream@1.3.5",
      "dependsOn": [
        "jsonparse@1.3.1",
        "through@2.3.8"
      ]
    },
    {
      "ref": "safe-buffer@5.1.2"
    },
    {
      "ref": "through2@2.0.5",
      "dependsOn": [
        "readable-stream@2.3.7",
        "xtend@4.0.2"
      ]
    },
    {
      "ref": "umd@3.0.3"
    },
    {
      "ref": "browser-resolve@2.0.0",
      "dependsOn": [
        "resolve@1.20.0"
      ]
    },
    {
      "ref": "resolve@1.20.0",
      "dependsOn": [
        "is-core-module@2.4.0",
        "path-parse@1.0.7"
      ]
    },
    {
      "ref": "browserify-zlib@0.2.0",
      "dependsOn": [
        "pako@1.0.11"
      ]
    },
    {
      "ref": "pako@1.0.11"
    },
    {
      "ref": "buffer@5.2.1",
      "dependsOn": [
        "base64-js@1.5.1",
        "ieee754@1.2.1"
      ]
    },
    {
      "ref": "base64-js@1.5.1"
    },
    {
      "ref": "ieee754@1.2.1"
    },
    {
      "ref": "cached-path-relative@1.1.0"
    },
    {
      "ref": "concat-stream@1.6.2",
      "dependsOn": [
        "buffer-from@1.1.1",
        "inherits@2.0.4",
        "readable-stream@2.3.7",
        "typedarray@0.0.6"
      ]
    },
    {
      "ref": "buffer-from@1.1.1"
    },
    {
      "ref": "readable-stream@2.3.7",
      "dependsOn": [
        "core-util-is@1.0.2",
        "inherits@2.0.4",
        "isarray@1.0.0",
        "process-nextick-args@2.0.1",
        "safe-buffer@5.1.2",
        "string_decoder@1.1.1",
        "util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "typedarray@0.0.6"
    },
    {
      "ref": "console-browserify@1.2.0"
    },
    {
      "ref": "constants-browserify@1.0.0"
    },
    {
      "ref": "crypto-browserify@3.12.0",
      "dependsOn": [
        "browserify-cipher@1.0.1",
        "browserify-sign@4.2.2",
        "create-ecdh@4.0.4",
        "create-hash@1.2.0",
        "create-hmac@1.1.7",
        "diffie-hellman@5.0.3",
        "inherits@2.0.4",
        "pbkdf2@3.1.2",
        "public-encrypt@4.0.3",
        "randombytes@2.1.0",
        "randomfill@1.0.4"
      ]
    },
    {
      "ref": "browserify-cipher@1.0.1",
      "dependsOn": [
        "browserify-aes@1.2.0",
        "browserify-des@1.0.2",
        "evp_bytestokey@1.0.3"
      ]
    },
    {
      "ref": "browserify-aes@1.2.0",
      "dependsOn": [
        "buffer-xor@1.0.3",
        "cipher-base@1.0.4",
        "create-hash@1.2.0",
        "evp_bytestokey@1.0.3",
        "inherits@2.0.4",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "buffer-xor@1.0.3"
    },
    {
      "ref": "cipher-base@1.0.4",
      "dependsOn": [
        "inherits@2.0.4",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "create-hash@1.2.0",
      "dependsOn": [
        "cipher-base@1.0.4",
        "inherits@2.0.4",
        "md5.js@1.3.5",
        "ripemd160@2.0.2",
        "sha.js@2.4.11"
      ]
    },
    {
      "ref": "evp_bytestokey@1.0.3",
      "dependsOn": [
        "md5.js@1.3.5",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "browserify-des@1.0.2",
      "dependsOn": [
        "cipher-base@1.0.4",
        "des.js@1.0.1",
        "inherits@2.0.4",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "des.js@1.0.1",
      "dependsOn": [
        "inherits@2.0.4",
        "minimalistic-assert@1.0.1"
      ]
    },
    {
      "ref": "minimalistic-assert@1.0.1"
    },
    {
      "ref": "md5.js@1.3.5",
      "dependsOn": [
        "hash-base@3.1.0",
        "inherits@2.0.4",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "browserify-sign@4.2.2",
      "dependsOn": [
        "bn.js@5.2.1",
        "browserify-rsa@4.1.0",
        "create-hash@1.2.0",
        "create-hmac@1.1.7",
        "elliptic@6.6.1",
        "inherits@2.0.4",
        "parse-asn1@5.1.6",
        "browserify-sign@4.2.2|readable-stream@3.6.2",
        "browserify-sign@4.2.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "browserify-sign@4.2.2|readable-stream@3.6.2",
      "dependsOn": [
        "inherits@2.0.4",
        "string_decoder@1.1.1",
        "util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "browserify-sign@4.2.2|safe-buffer@5.2.1"
    },
    {
      "ref": "bn.js@5.2.1"
    },
    {
      "ref": "browserify-rsa@4.1.0",
      "dependsOn": [
        "bn.js@5.2.1",
        "randombytes@2.1.0"
      ]
    },
    {
      "ref": "randombytes@2.1.0",
      "dependsOn": [
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "create-hmac@1.1.7",
      "dependsOn": [
        "cipher-base@1.0.4",
        "create-hash@1.2.0",
        "inherits@2.0.4",
        "ripemd160@2.0.2",
        "safe-buffer@5.1.2",
        "sha.js@2.4.11"
      ]
    },
    {
      "ref": "elliptic@6.6.1",
      "dependsOn": [
        "elliptic@6.6.1|bn.js@4.12.0",
        "brorand@1.1.0",
        "hash.js@1.1.7",
        "hmac-drbg@1.0.1",
        "inherits@2.0.4",
        "minimalistic-assert@1.0.1",
        "minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "elliptic@6.6.1|bn.js@4.12.0"
    },
    {
      "ref": "brorand@1.1.0"
    },
    {
      "ref": "hash.js@1.1.7",
      "dependsOn": [
        "inherits@2.0.4",
        "minimalistic-assert@1.0.1"
      ]
    },
    {
      "ref": "hmac-drbg@1.0.1",
      "dependsOn": [
        "hash.js@1.1.7",
        "minimalistic-assert@1.0.1",
        "minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "minimalistic-crypto-utils@1.0.1"
    },
    {
      "ref": "parse-asn1@5.1.6",
      "dependsOn": [
        "asn1.js@5.4.1",
        "browserify-aes@1.2.0",
        "evp_bytestokey@1.0.3",
        "pbkdf2@3.1.2",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "asn1.js@5.4.1",
      "dependsOn": [
        "asn1.js@5.4.1|bn.js@4.12.0",
        "inherits@2.0.4",
        "minimalistic-assert@1.0.1",
        "safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "asn1.js@5.4.1|bn.js@4.12.0"
    },
    {
      "ref": "pbkdf2@3.1.2",
      "dependsOn": [
        "create-hash@1.2.0",
        "create-hmac@1.1.7",
        "ripemd160@2.0.2",
        "safe-buffer@5.1.2",
        "sha.js@2.4.11"
      ]
    },
    {
      "ref": "string_decoder@1.1.1",
      "dependsOn": [
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "util-deprecate@1.0.2"
    },
    {
      "ref": "create-ecdh@4.0.4",
      "dependsOn": [
        "create-ecdh@4.0.4|bn.js@4.12.0",
        "elliptic@6.6.1"
      ]
    },
    {
      "ref": "create-ecdh@4.0.4|bn.js@4.12.0"
    },
    {
      "ref": "hash-base@3.1.0",
      "dependsOn": [
        "inherits@2.0.4",
        "hash-base@3.1.0|readable-stream@3.6.0",
        "hash-base@3.1.0|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "hash-base@3.1.0|readable-stream@3.6.0",
      "dependsOn": [
        "inherits@2.0.4",
        "string_decoder@1.1.1",
        "util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "hash-base@3.1.0|safe-buffer@5.2.1"
    },
    {
      "ref": "ripemd160@2.0.2",
      "dependsOn": [
        "hash-base@3.1.0",
        "inherits@2.0.4"
      ]
    },
    {
      "ref": "sha.js@2.4.11",
      "dependsOn": [
        "inherits@2.0.4",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "diffie-hellman@5.0.3",
      "dependsOn": [
        "diffie-hellman@5.0.3|bn.js@4.12.0",
        "miller-rabin@4.0.1",
        "randombytes@2.1.0"
      ]
    },
    {
      "ref": "diffie-hellman@5.0.3|bn.js@4.12.0"
    },
    {
      "ref": "miller-rabin@4.0.1",
      "dependsOn": [
        "miller-rabin@4.0.1|bn.js@4.12.0",
        "brorand@1.1.0"
      ]
    },
    {
      "ref": "miller-rabin@4.0.1|bn.js@4.12.0"
    },
    {
      "ref": "public-encrypt@4.0.3",
      "dependsOn": [
        "public-encrypt@4.0.3|bn.js@4.12.0",
        "browserify-rsa@4.1.0",
        "create-hash@1.2.0",
        "parse-asn1@5.1.6",
        "randombytes@2.1.0",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "public-encrypt@4.0.3|bn.js@4.12.0"
    },
    {
      "ref": "randomfill@1.0.4",
      "dependsOn": [
        "randombytes@2.1.0",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "deps-sort@2.0.1",
      "dependsOn": [
        "JSONStream@1.3.5",
        "shasum-object@1.0.0",
        "subarg@1.0.0",
        "through2@2.0.5"
      ]
    },
    {
      "ref": "shasum-object@1.0.0",
      "dependsOn": [
        "fast-safe-stringify@2.0.7"
      ]
    },
    {
      "ref": "subarg@1.0.0",
      "dependsOn": [
        "minimist@1.2.6"
      ]
    },
    {
      "ref": "domain-browser@1.2.0"
    },
    {
      "ref": "duplexer2@0.1.4",
      "dependsOn": [
        "readable-stream@2.3.7"
      ]
    },
    {
      "ref": "events@3.3.0"
    },
    {
      "ref": "glob@7.2.0",
      "dependsOn": [
        "fs.realpath@1.0.0",
        "inflight@1.0.6",
        "inherits@2.0.4",
        "minimatch@3.1.2",
        "once@1.4.0",
        "path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "fs.realpath@1.0.0"
    },
    {
      "ref": "inflight@1.0.6",
      "dependsOn": [
        "once@1.4.0",
        "wrappy@1.0.2"
      ]
    },
    {
      "ref": "once@1.4.0",
      "dependsOn": [
        "wrappy@1.0.2"
      ]
    },
    {
      "ref": "wrappy@1.0.2"
    },
    {
      "ref": "minimatch@3.1.2",
      "dependsOn": [
        "brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "brace-expansion@1.1.11",
      "dependsOn": [
        "balanced-match@1.0.0",
        "concat-map@0.0.1"
      ]
    },
    {
      "ref": "balanced-match@1.0.0"
    },
    {
      "ref": "concat-map@0.0.1"
    },
    {
      "ref": "path-is-absolute@1.0.1"
    },
    {
      "ref": "has@1.0.3",
      "dependsOn": [
        "function-bind@1.1.2"
      ]
    },
    {
      "ref": "htmlescape@1.1.1"
    },
    {
      "ref": "https-browserify@1.0.0"
    },
    {
      "ref": "insert-module-globals@7.2.1",
      "dependsOn": [
        "acorn-node@1.8.2",
        "combine-source-map@0.8.0",
        "concat-stream@1.6.2",
        "is-buffer@1.1.6",
        "JSONStream@1.3.5",
        "path-is-absolute@1.0.1",
        "process@0.11.10",
        "through2@2.0.5",
        "undeclared-identifiers@1.1.3",
        "xtend@4.0.2"
      ]
    },
    {
      "ref": "acorn-node@1.8.2",
      "dependsOn": [
        "acorn-walk@7.2.0",
        "acorn@7.4.1",
        "xtend@4.0.2"
      ]
    },
    {
      "ref": "acorn-walk@7.2.0"
    },
    {
      "ref": "acorn@7.4.1"
    },
    {
      "ref": "xtend@4.0.2"
    },
    {
      "ref": "is-buffer@1.1.6"
    },
    {
      "ref": "process@0.11.10"
    },
    {
      "ref": "undeclared-identifiers@1.1.3",
      "dependsOn": [
        "acorn-node@1.8.2",
        "dash-ast@1.0.0",
        "get-assigned-identifiers@1.2.0",
        "simple-concat@1.0.1",
        "xtend@4.0.2"
      ]
    },
    {
      "ref": "dash-ast@1.0.0"
    },
    {
      "ref": "get-assigned-identifiers@1.2.0"
    },
    {
      "ref": "simple-concat@1.0.1"
    },
    {
      "ref": "jsonparse@1.3.1"
    },
    {
      "ref": "through@2.3.8"
    },
    {
      "ref": "labeled-stream-splicer@2.0.2",
      "dependsOn": [
        "inherits@2.0.4",
        "stream-splicer@2.0.1"
      ]
    },
    {
      "ref": "stream-splicer@2.0.1",
      "dependsOn": [
        "inherits@2.0.4",
        "readable-stream@2.3.7"
      ]
    },
    {
      "ref": "mkdirp-classic@0.5.3"
    },
    {
      "ref": "module-deps@6.2.3",
      "dependsOn": [
        "browser-resolve@2.0.0",
        "cached-path-relative@1.1.0",
        "concat-stream@1.6.2",
        "defined@1.0.0",
        "detective@5.2.0",
        "duplexer2@0.1.4",
        "inherits@2.0.4",
        "JSONStream@1.3.5",
        "parents@1.0.1",
        "readable-stream@2.3.7",
        "resolve@1.20.0",
        "stream-combiner2@1.1.1",
        "subarg@1.0.0",
        "through2@2.0.5",
        "xtend@4.0.2"
      ]
    },
    {
      "ref": "detective@5.2.0",
      "dependsOn": [
        "acorn-node@1.8.2",
        "defined@1.0.0",
        "minimist@1.2.6"
      ]
    },
    {
      "ref": "minimist@1.2.6"
    },
    {
      "ref": "parents@1.0.1",
      "dependsOn": [
        "path-platform@0.11.15"
      ]
    },
    {
      "ref": "stream-combiner2@1.1.1",
      "dependsOn": [
        "duplexer2@0.1.4",
        "readable-stream@2.3.7"
      ]
    },
    {
      "ref": "os-browserify@0.3.0"
    },
    {
      "ref": "path-platform@0.11.15"
    },
    {
      "ref": "path-browserify@1.0.1"
    },
    {
      "ref": "punycode@1.4.1"
    },
    {
      "ref": "querystring-es3@0.2.1"
    },
    {
      "ref": "read-only-stream@2.0.0",
      "dependsOn": [
        "readable-stream@2.3.7"
      ]
    },
    {
      "ref": "core-util-is@1.0.2"
    },
    {
      "ref": "isarray@1.0.0"
    },
    {
      "ref": "process-nextick-args@2.0.1"
    },
    {
      "ref": "is-core-module@2.4.0",
      "dependsOn": [
        "has@1.0.3"
      ]
    },
    {
      "ref": "path-parse@1.0.7"
    },
    {
      "ref": "fast-safe-stringify@2.0.7"
    },
    {
      "ref": "shell-quote@1.7.3"
    },
    {
      "ref": "stream-browserify@3.0.0",
      "dependsOn": [
        "inherits@2.0.4",
        "stream-browserify@3.0.0|readable-stream@3.6.0"
      ]
    },
    {
      "ref": "stream-browserify@3.0.0|readable-stream@3.6.0",
      "dependsOn": [
        "inherits@2.0.4",
        "string_decoder@1.1.1",
        "util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "stream-http@3.2.0",
      "dependsOn": [
        "builtin-status-codes@3.0.0",
        "inherits@2.0.4",
        "stream-http@3.2.0|readable-stream@3.6.0",
        "xtend@4.0.2"
      ]
    },
    {
      "ref": "stream-http@3.2.0|readable-stream@3.6.0",
      "dependsOn": [
        "inherits@2.0.4",
        "string_decoder@1.1.1",
        "util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "builtin-status-codes@3.0.0"
    },
    {
      "ref": "syntax-error@1.4.0",
      "dependsOn": [
        "acorn-node@1.8.2"
      ]
    },
    {
      "ref": "timers-browserify@1.4.2",
      "dependsOn": [
        "process@0.11.10"
      ]
    },
    {
      "ref": "tty-browserify@0.0.1"
    },
    {
      "ref": "url@0.11.0",
      "dependsOn": [
        "url@0.11.0|punycode@1.3.2",
        "querystring@0.2.0"
      ]
    },
    {
      "ref": "url@0.11.0|punycode@1.3.2"
    },
    {
      "ref": "querystring@0.2.0"
    },
    {
      "ref": "util@0.12.3",
      "dependsOn": [
        "inherits@2.0.4",
        "is-arguments@1.1.0",
        "is-generator-function@1.0.9",
        "is-typed-array@1.1.5",
        "safe-buffer@5.1.2",
        "which-typed-array@1.1.4"
      ]
    },
    {
      "ref": "is-arguments@1.1.0",
      "dependsOn": [
        "call-bind@1.0.7"
      ]
    },
    {
      "ref": "is-generator-function@1.0.9"
    },
    {
      "ref": "is-typed-array@1.1.5",
      "dependsOn": [
        "available-typed-arrays@1.0.3",
        "call-bind@1.0.7",
        "es-abstract@1.18.0",
        "foreach@2.0.5",
        "has-symbols@1.0.3"
      ]
    },
    {
      "ref": "available-typed-arrays@1.0.3",
      "dependsOn": [
        "array.prototype.filter@1.0.0"
      ]
    },
    {
      "ref": "array.prototype.filter@1.0.0",
      "dependsOn": [
        "call-bind@1.0.7",
        "define-properties@1.1.3",
        "es-abstract@1.18.0",
        "es-array-method-boxes-properly@1.0.0",
        "is-string@1.0.6"
      ]
    },
    {
      "ref": "define-properties@1.1.3",
      "dependsOn": [
        "object-keys@1.1.1"
      ]
    },
    {
      "ref": "object-keys@1.1.1"
    },
    {
      "ref": "es-abstract@1.18.0",
      "dependsOn": [
        "call-bind@1.0.7",
        "es-to-primitive@1.2.1",
        "function-bind@1.1.2",
        "get-intrinsic@1.2.4",
        "has-symbols@1.0.3",
        "has@1.0.3",
        "is-callable@1.2.3",
        "is-negative-zero@2.0.1",
        "is-regex@1.1.3",
        "is-string@1.0.6",
        "object-inspect@1.13.2",
        "object-keys@1.1.1",
        "object.assign@4.1.2",
        "string.prototype.trimend@1.0.4",
        "string.prototype.trimstart@1.0.4",
        "unbox-primitive@1.0.1"
      ]
    },
    {
      "ref": "es-array-method-boxes-properly@1.0.0"
    },
    {
      "ref": "is-string@1.0.6"
    },
    {
      "ref": "es-to-primitive@1.2.1",
      "dependsOn": [
        "is-callable@1.2.3",
        "is-date-object@1.0.4",
        "is-symbol@1.0.4"
      ]
    },
    {
      "ref": "is-callable@1.2.3"
    },
    {
      "ref": "is-date-object@1.0.4"
    },
    {
      "ref": "is-symbol@1.0.4",
      "dependsOn": [
        "has-symbols@1.0.3"
      ]
    },
    {
      "ref": "is-negative-zero@2.0.1"
    },
    {
      "ref": "is-regex@1.1.3",
      "dependsOn": [
        "call-bind@1.0.7",
        "has-symbols@1.0.3"
      ]
    },
    {
      "ref": "object.assign@4.1.2",
      "dependsOn": [
        "call-bind@1.0.7",
        "define-properties@1.1.3",
        "has-symbols@1.0.3",
        "object-keys@1.1.1"
      ]
    },
    {
      "ref": "string.prototype.trimend@1.0.4",
      "dependsOn": [
        "call-bind@1.0.7",
        "define-properties@1.1.3"
      ]
    },
    {
      "ref": "string.prototype.trimstart@1.0.4",
      "dependsOn": [
        "call-bind@1.0.7",
        "define-properties@1.1.3"
      ]
    },
    {
      "ref": "unbox-primitive@1.0.1",
      "dependsOn": [
        "function-bind@1.1.2",
        "has-bigints@1.0.1",
        "has-symbols@1.0.3",
        "which-boxed-primitive@1.0.2"
      ]
    },
    {
      "ref": "has-bigints@1.0.1"
    },
    {
      "ref": "which-boxed-primitive@1.0.2",
      "dependsOn": [
        "is-bigint@1.0.2",
        "is-boolean-object@1.1.1",
        "is-number-object@1.0.5",
        "is-string@1.0.6",
        "is-symbol@1.0.4"
      ]
    },
    {
      "ref": "is-bigint@1.0.2"
    },
    {
      "ref": "is-boolean-object@1.1.1",
      "dependsOn": [
        "call-bind@1.0.7"
      ]
    },
    {
      "ref": "is-number-object@1.0.5"
    },
    {
      "ref": "foreach@2.0.5"
    },
    {
      "ref": "which-typed-array@1.1.4",
      "dependsOn": [
        "available-typed-arrays@1.0.3",
        "call-bind@1.0.7",
        "es-abstract@1.18.0",
        "foreach@2.0.5",
        "function-bind@1.1.2",
        "has-symbols@1.0.3",
        "is-typed-array@1.1.5"
      ]
    },
    {
      "ref": "vm-browserify@1.1.2"
    },
    {
      "ref": "chai@4.5.0",
      "dependsOn": [
        "assertion-error@1.1.0",
        "check-error@1.0.3",
        "deep-eql@4.1.4",
        "get-func-name@2.0.2",
        "loupe@2.3.7",
        "pathval@1.1.1",
        "type-detect@4.1.0"
      ]
    },
    {
      "ref": "assertion-error@1.1.0"
    },
    {
      "ref": "check-error@1.0.3",
      "dependsOn": [
        "get-func-name@2.0.2"
      ]
    },
    {
      "ref": "get-func-name@2.0.2"
    },
    {
      "ref": "deep-eql@4.1.4",
      "dependsOn": [
        "type-detect@4.1.0"
      ]
    },
    {
      "ref": "type-detect@4.1.0"
    },
    {
      "ref": "loupe@2.3.7",
      "dependsOn": [
        "get-func-name@2.0.2"
      ]
    },
    {
      "ref": "pathval@1.1.1"
    },
    {
      "ref": "clipboard@2.0.11",
      "dependsOn": [
        "good-listener@1.2.2",
        "select@1.1.2",
        "tiny-emitter@2.1.0"
      ]
    },
    {
      "ref": "good-listener@1.2.2",
      "dependsOn": [
        "delegate@3.2.0"
      ]
    },
    {
      "ref": "delegate@3.2.0"
    },
    {
      "ref": "select@1.1.2"
    },
    {
      "ref": "tiny-emitter@2.1.0"
    },
    {
      "ref": "cmdparser@0.1.0",
      "dependsOn": [
        "async@3.2.6"
      ]
    },
    {
      "ref": "config@3.3.12",
      "dependsOn": [
        "json5@2.2.3"
      ]
    },
    {
      "ref": "json5@2.2.3"
    },
    {
      "ref": "dateformat@3.0.3"
    },
    {
      "ref": "ejs@3.1.10",
      "dependsOn": [
        "jake@10.8.5"
      ]
    },
    {
      "ref": "jake@10.8.5",
      "dependsOn": [
        "async@3.2.6",
        "chalk@4.1.2",
        "filelist@1.0.4",
        "minimatch@3.1.2"
      ]
    },
    {
      "ref": "chalk@4.1.2",
      "dependsOn": [
        "ansi-styles@4.3.0",
        "supports-color@7.2.0"
      ]
    },
    {
      "ref": "ansi-styles@4.3.0",
      "dependsOn": [
        "color-convert@2.0.1"
      ]
    },
    {
      "ref": "color-convert@2.0.1",
      "dependsOn": [
        "color-name@1.1.4"
      ]
    },
    {
      "ref": "color-name@1.1.4"
    },
    {
      "ref": "supports-color@7.2.0",
      "dependsOn": [
        "has-flag@4.0.0"
      ]
    },
    {
      "ref": "filelist@1.0.4",
      "dependsOn": [
        "filelist@1.0.4|minimatch@5.1.0"
      ]
    },
    {
      "ref": "filelist@1.0.4|minimatch@5.1.0",
      "dependsOn": [
        "filelist@1.0.4|brace-expansion@2.0.1"
      ]
    },
    {
      "ref": "filelist@1.0.4|brace-expansion@2.0.1",
      "dependsOn": [
        "balanced-match@1.0.0"
      ]
    },
    {
      "ref": "express-partials@0.3.0"
    },
    {
      "ref": "express@4.21.2",
      "dependsOn": [
        "accepts@1.3.8",
        "array-flatten@1.1.1",
        "body-parser@1.20.3",
        "content-disposition@0.5.4",
        "content-type@1.0.5",
        "cookie-signature@1.0.6",
        "cookie@0.7.1",
        "express@4.21.2|debug@2.6.9",
        "depd@2.0.0",
        "encodeurl@2.0.0",
        "escape-html@1.0.3",
        "etag@1.8.1",
        "finalhandler@1.3.1",
        "fresh@0.5.2",
        "http-errors@2.0.0",
        "merge-descriptors@1.0.3",
        "methods@1.1.2",
        "on-finished@2.4.1",
        "parseurl@1.3.3",
        "path-to-regexp@0.1.12",
        "proxy-addr@2.0.7",
        "qs@6.13.0",
        "range-parser@1.2.1",
        "express@4.21.2|safe-buffer@5.2.1",
        "send@0.19.0",
        "serve-static@1.16.2",
        "setprototypeof@1.2.0",
        "statuses@2.0.1",
        "type-is@1.6.18",
        "utils-merge@1.0.1",
        "vary@1.1.2"
      ]
    },
    {
      "ref": "express@4.21.2|debug@2.6.9",
      "dependsOn": [
        "express@4.21.2|ms@2.0.0"
      ]
    },
    {
      "ref": "express@4.21.2|ms@2.0.0"
    },
    {
      "ref": "express@4.21.2|safe-buffer@5.2.1"
    },
    {
      "ref": "accepts@1.3.8",
      "dependsOn": [
        "mime-types@2.1.35",
        "negotiator@0.6.3"
      ]
    },
    {
      "ref": "negotiator@0.6.3"
    },
    {
      "ref": "array-flatten@1.1.1"
    },
    {
      "ref": "content-disposition@0.5.4",
      "dependsOn": [
        "content-disposition@0.5.4|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "content-disposition@0.5.4|safe-buffer@5.2.1"
    },
    {
      "ref": "cookie-signature@1.0.6"
    },
    {
      "ref": "cookie@0.7.1"
    },
    {
      "ref": "encodeurl@2.0.0"
    },
    {
      "ref": "escape-html@1.0.3"
    },
    {
      "ref": "etag@1.8.1"
    },
    {
      "ref": "finalhandler@1.3.1",
      "dependsOn": [
        "finalhandler@1.3.1|debug@2.6.9",
        "encodeurl@2.0.0",
        "escape-html@1.0.3",
        "on-finished@2.4.1",
        "parseurl@1.3.3",
        "statuses@2.0.1",
        "unpipe@1.0.0"
      ]
    },
    {
      "ref": "finalhandler@1.3.1|debug@2.6.9",
      "dependsOn": [
        "finalhandler@1.3.1|ms@2.0.0"
      ]
    },
    {
      "ref": "finalhandler@1.3.1|ms@2.0.0"
    },
    {
      "ref": "parseurl@1.3.3"
    },
    {
      "ref": "fresh@0.5.2"
    },
    {
      "ref": "merge-descriptors@1.0.3"
    },
    {
      "ref": "methods@1.1.2"
    },
    {
      "ref": "path-to-regexp@0.1.12"
    },
    {
      "ref": "proxy-addr@2.0.7",
      "dependsOn": [
        "forwarded@0.2.0",
        "ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "forwarded@0.2.0"
    },
    {
      "ref": "ipaddr.js@1.9.1"
    },
    {
      "ref": "range-parser@1.2.1"
    },
    {
      "ref": "send@0.19.0",
      "dependsOn": [
        "send@0.19.0|debug@2.6.9",
        "depd@2.0.0",
        "destroy@1.2.0",
        "send@0.19.0|encodeurl@1.0.2",
        "escape-html@1.0.3",
        "etag@1.8.1",
        "fresh@0.5.2",
        "http-errors@2.0.0",
        "mime@1.6.0",
        "ms@2.1.3",
        "on-finished@2.4.1",
        "range-parser@1.2.1",
        "statuses@2.0.1"
      ]
    },
    {
      "ref": "send@0.19.0|debug@2.6.9",
      "dependsOn": [
        "send@0.19.0|debug@2.6.9|ms@2.0.0"
      ]
    },
    {
      "ref": "send@0.19.0|debug@2.6.9|ms@2.0.0"
    },
    {
      "ref": "send@0.19.0|encodeurl@1.0.2"
    },
    {
      "ref": "mime@1.6.0"
    },
    {
      "ref": "ms@2.1.3"
    },
    {
      "ref": "serve-static@1.16.2",
      "dependsOn": [
        "encodeurl@2.0.0",
        "escape-html@1.0.3",
        "parseurl@1.3.3",
        "send@0.19.0"
      ]
    },
    {
      "ref": "utils-merge@1.0.1"
    },
    {
      "ref": "vary@1.1.2"
    },
    {
      "ref": "inflection@1.13.4"
    },
    {
      "ref": "ioredis@5.5.0",
      "dependsOn": [
        "@ioredis/commands@1.2.0",
        "cluster-key-slot@1.1.0",
        "debug@4.4.0",
        "denque@2.1.0",
        "lodash.defaults@4.2.0",
        "lodash.isarguments@3.1.0",
        "redis-errors@1.2.0",
        "redis-parser@3.0.0",
        "standard-as-callback@2.1.0"
      ]
    },
    {
      "ref": "@ioredis/commands@1.2.0"
    },
    {
      "ref": "cluster-key-slot@1.1.0"
    },
    {
      "ref": "debug@4.4.0",
      "dependsOn": [
        "ms@2.1.3"
      ]
    },
    {
      "ref": "denque@2.1.0"
    },
    {
      "ref": "lodash.defaults@4.2.0"
    },
    {
      "ref": "lodash.isarguments@3.1.0"
    },
    {
      "ref": "redis-errors@1.2.0"
    },
    {
      "ref": "redis-parser@3.0.0",
      "dependsOn": [
        "redis-errors@1.2.0"
      ]
    },
    {
      "ref": "standard-as-callback@2.1.0"
    },
    {
      "ref": "jquery.json-viewer@1.5.0"
    },
    {
      "ref": "jsonwebtoken@9.0.2",
      "dependsOn": [
        "jws@3.2.2",
        "lodash.includes@4.3.0",
        "lodash.isboolean@3.0.3",
        "lodash.isinteger@4.0.4",
        "lodash.isnumber@3.0.3",
        "lodash.isplainobject@4.0.6",
        "lodash.isstring@4.0.1",
        "lodash.once@4.1.1",
        "ms@2.1.3",
        "semver@7.5.4"
      ]
    },
    {
      "ref": "jws@3.2.2",
      "dependsOn": [
        "jwa@1.4.1",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "jwa@1.4.1",
      "dependsOn": [
        "buffer-equal-constant-time@1.0.1",
        "ecdsa-sig-formatter@1.0.11",
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "buffer-equal-constant-time@1.0.1"
    },
    {
      "ref": "ecdsa-sig-formatter@1.0.11",
      "dependsOn": [
        "safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "lodash.includes@4.3.0"
    },
    {
      "ref": "lodash.isboolean@3.0.3"
    },
    {
      "ref": "lodash.isinteger@4.0.4"
    },
    {
      "ref": "lodash.isnumber@3.0.3"
    },
    {
      "ref": "lodash.isplainobject@4.0.6"
    },
    {
      "ref": "lodash.isstring@4.0.1"
    },
    {
      "ref": "lodash.once@4.1.1"
    },
    {
      "ref": "semver@7.5.4",
      "dependsOn": [
        "lru-cache@6.0.0"
      ]
    },
    {
      "ref": "lru-cache@6.0.0",
      "dependsOn": [
        "yallist@4.0.0"
      ]
    },
    {
      "ref": "yallist@4.0.0"
    },
    {
      "ref": "jstree@3.3.17",
      "dependsOn": [
        "jquery@3.6.0"
      ]
    },
    {
      "ref": "jquery@3.6.0"
    },
    {
      "ref": "lodash.isequal@4.5.0"
    },
    {
      "ref": "lossless-json@1.0.5"
    },
    {
      "ref": "mocha-junit-reporter@2.2.1",
      "dependsOn": [
        "debug@4.4.0",
        "md5@2.3.0",
        "mocha-junit-reporter@2.2.1|mkdirp@3.0.1",
        "mocha@11.1.0",
        "strip-ansi@6.0.1",
        "xml@1.0.1"
      ]
    },
    {
      "ref": "mocha-junit-reporter@2.2.1|mkdirp@3.0.1"
    },
    {
      "ref": "md5@2.3.0",
      "dependsOn": [
        "charenc@0.0.2",
        "crypt@0.0.2",
        "is-buffer@1.1.6"
      ]
    },
    {
      "ref": "charenc@0.0.2"
    },
    {
      "ref": "crypt@0.0.2"
    },
    {
      "ref": "mocha@11.1.0",
      "dependsOn": [
        "ansi-colors@4.1.3",
        "browser-stdout@1.3.1",
        "chokidar@3.5.3",
        "debug@4.4.0",
        "diff@5.2.0",
        "escape-string-regexp@4.0.0",
        "find-up@5.0.0",
        "mocha@11.1.0|glob@10.4.5",
        "he@1.2.0",
        "js-yaml@4.1.0",
        "log-symbols@4.1.0",
        "mocha@11.1.0|minimatch@5.1.6",
        "ms@2.1.3",
        "serialize-javascript@6.0.2",
        "strip-json-comments@3.1.1",
        "mocha@11.1.0|supports-color@8.1.1",
        "workerpool@6.5.1",
        "yargs-parser@21.1.1",
        "yargs-unparser@2.0.0",
        "yargs@17.7.2"
      ]
    },
    {
      "ref": "mocha@11.1.0|glob@10.4.5",
      "dependsOn": [
        "mocha@11.1.0|foreground-child@3.3.0",
        "jackspeak@3.4.3",
        "mocha@11.1.0|glob@10.4.5|minimatch@9.0.5",
        "mocha@11.1.0|minipass@7.1.2",
        "package-json-from-dist@1.0.1",
        "path-scurry@1.11.1"
      ]
    },
    {
      "ref": "mocha@11.1.0|glob@10.4.5|minimatch@9.0.5",
      "dependsOn": [
        "mocha@11.1.0|brace-expansion@2.0.1"
      ]
    },
    {
      "ref": "mocha@11.1.0|foreground-child@3.3.0",
      "dependsOn": [
        "cross-spawn@7.0.6",
        "mocha@11.1.0|signal-exit@4.1.0"
      ]
    },
    {
      "ref": "mocha@11.1.0|signal-exit@4.1.0"
    },
    {
      "ref": "mocha@11.1.0|brace-expansion@2.0.1",
      "dependsOn": [
        "balanced-match@1.0.0"
      ]
    },
    {
      "ref": "mocha@11.1.0|minipass@7.1.2"
    },
    {
      "ref": "mocha@11.1.0|minimatch@5.1.6",
      "dependsOn": [
        "mocha@11.1.0|brace-expansion@2.0.1"
      ]
    },
    {
      "ref": "mocha@11.1.0|supports-color@8.1.1",
      "dependsOn": [
        "has-flag@4.0.0"
      ]
    },
    {
      "ref": "strip-ansi@6.0.1",
      "dependsOn": [
        "ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "ansi-regex@5.0.1"
    },
    {
      "ref": "xml@1.0.1"
    },
    {
      "ref": "ansi-colors@4.1.3"
    },
    {
      "ref": "browser-stdout@1.3.1"
    },
    {
      "ref": "chokidar@3.5.3",
      "dependsOn": [
        "anymatch@3.1.2",
        "braces@3.0.3",
        "glob-parent@5.1.2",
        "is-binary-path@2.1.0",
        "is-glob@4.0.3",
        "normalize-path@3.0.0",
        "readdirp@3.6.0"
      ]
    },
    {
      "ref": "anymatch@3.1.2",
      "dependsOn": [
        "normalize-path@3.0.0",
        "picomatch@2.3.1"
      ]
    },
    {
      "ref": "normalize-path@3.0.0"
    },
    {
      "ref": "picomatch@2.3.1"
    },
    {
      "ref": "braces@3.0.3",
      "dependsOn": [
        "fill-range@7.1.1"
      ]
    },
    {
      "ref": "fill-range@7.1.1",
      "dependsOn": [
        "to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "to-regex-range@5.0.1",
      "dependsOn": [
        "is-number@7.0.0"
      ]
    },
    {
      "ref": "is-number@7.0.0"
    },
    {
      "ref": "glob-parent@5.1.2",
      "dependsOn": [
        "is-glob@4.0.3"
      ]
    },
    {
      "ref": "is-glob@4.0.3",
      "dependsOn": [
        "is-extglob@2.1.1"
      ]
    },
    {
      "ref": "is-binary-path@2.1.0",
      "dependsOn": [
        "binary-extensions@2.2.0"
      ]
    },
    {
      "ref": "binary-extensions@2.2.0"
    },
    {
      "ref": "is-extglob@2.1.1"
    },
    {
      "ref": "readdirp@3.6.0",
      "dependsOn": [
        "picomatch@2.3.1"
      ]
    },
    {
      "ref": "diff@5.2.0"
    },
    {
      "ref": "escape-string-regexp@4.0.0"
    },
    {
      "ref": "find-up@5.0.0",
      "dependsOn": [
        "locate-path@6.0.0",
        "path-exists@4.0.0"
      ]
    },
    {
      "ref": "locate-path@6.0.0",
      "dependsOn": [
        "p-locate@5.0.0"
      ]
    },
    {
      "ref": "p-locate@5.0.0",
      "dependsOn": [
        "p-limit@3.1.0"
      ]
    },
    {
      "ref": "p-limit@3.1.0",
      "dependsOn": [
        "yocto-queue@0.1.0"
      ]
    },
    {
      "ref": "yocto-queue@0.1.0"
    },
    {
      "ref": "path-exists@4.0.0"
    },
    {
      "ref": "cross-spawn@7.0.6",
      "dependsOn": [
        "path-key@3.1.1",
        "shebang-command@2.0.0",
        "which@2.0.2"
      ]
    },
    {
      "ref": "jackspeak@3.4.3",
      "dependsOn": [
        "@isaacs/cliui@8.0.2"
      ]
    },
    {
      "ref": "@isaacs/cliui@8.0.2",
      "dependsOn": [
        "string-width@4.2.3",
        "@isaacs/cliui@8.0.2|string-width@5.1.2",
        "BomRef.3lv5k0ajhlo.7s114q1otro",
        "@isaacs/cliui@8.0.2|strip-ansi@7.1.0",
        "wrap-ansi@7.0.0",
        "@isaacs/cliui@8.0.2|wrap-ansi@8.1.0"
      ]
    },
    {
      "ref": "@isaacs/cliui@8.0.2|string-width@5.1.2",
      "dependsOn": [
        "eastasianwidth@0.2.0",
        "@isaacs/cliui@8.0.2|emoji-regex@9.2.2",
        "@isaacs/cliui@8.0.2|strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "@isaacs/cliui@8.0.2|emoji-regex@9.2.2"
    },
    {
      "ref": "@isaacs/cliui@8.0.2|strip-ansi@7.1.0",
      "dependsOn": [
        "@isaacs/cliui@8.0.2|ansi-regex@6.1.0"
      ]
    },
    {
      "ref": "@isaacs/cliui@8.0.2|ansi-regex@6.1.0"
    },
    {
      "ref": "@isaacs/cliui@8.0.2|wrap-ansi@8.1.0",
      "dependsOn": [
        "@isaacs/cliui@8.0.2|ansi-styles@6.2.1",
        "@isaacs/cliui@8.0.2|string-width@5.1.2",
        "@isaacs/cliui@8.0.2|strip-ansi@7.1.0"
      ]
    },
    {
      "ref": "@isaacs/cliui@8.0.2|ansi-styles@6.2.1"
    },
    {
      "ref": "string-width@4.2.3",
      "dependsOn": [
        "emoji-regex@8.0.0",
        "is-fullwidth-code-point@3.0.0",
        "strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "emoji-regex@8.0.0"
    },
    {
      "ref": "is-fullwidth-code-point@3.0.0"
    },
    {
      "ref": "eastasianwidth@0.2.0"
    },
    {
      "ref": "BomRef.3lv5k0ajhlo.7s114q1otro",
      "dependsOn": [
        "ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "wrap-ansi@7.0.0",
      "dependsOn": [
        "ansi-styles@4.3.0",
        "BomRef.bdjfpshl9d8.91evsm3i8n",
        "strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "BomRef.bdjfpshl9d8.91evsm3i8n",
      "dependsOn": [
        "emoji-regex@8.0.0",
        "is-fullwidth-code-point@3.0.0",
        "strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "package-json-from-dist@1.0.1"
    },
    {
      "ref": "path-scurry@1.11.1",
      "dependsOn": [
        "path-scurry@1.11.1|lru-cache@10.4.3",
        "minipass@5.0.0"
      ]
    },
    {
      "ref": "path-scurry@1.11.1|lru-cache@10.4.3"
    },
    {
      "ref": "minipass@5.0.0"
    },
    {
      "ref": "he@1.2.0"
    },
    {
      "ref": "js-yaml@4.1.0",
      "dependsOn": [
        "argparse@2.0.1"
      ]
    },
    {
      "ref": "argparse@2.0.1"
    },
    {
      "ref": "log-symbols@4.1.0",
      "dependsOn": [
        "chalk@4.1.2",
        "is-unicode-supported@0.1.0"
      ]
    },
    {
      "ref": "is-unicode-supported@0.1.0"
    },
    {
      "ref": "serialize-javascript@6.0.2",
      "dependsOn": [
        "randombytes@2.1.0"
      ]
    },
    {
      "ref": "strip-json-comments@3.1.1"
    },
    {
      "ref": "has-flag@4.0.0"
    },
    {
      "ref": "workerpool@6.5.1"
    },
    {
      "ref": "yargs-parser@21.1.1"
    },
    {
      "ref": "yargs-unparser@2.0.0",
      "dependsOn": [
        "yargs-unparser@2.0.0|camelcase@6.3.0",
        "yargs-unparser@2.0.0|decamelize@4.0.0",
        "flat@5.0.2",
        "is-plain-obj@2.1.0"
      ]
    },
    {
      "ref": "yargs-unparser@2.0.0|camelcase@6.3.0"
    },
    {
      "ref": "yargs-unparser@2.0.0|decamelize@4.0.0"
    },
    {
      "ref": "flat@5.0.2"
    },
    {
      "ref": "is-plain-obj@2.1.0"
    },
    {
      "ref": "yargs@17.7.2",
      "dependsOn": [
        "cliui@8.0.1",
        "escalade@3.2.0",
        "get-caller-file@2.0.5",
        "require-directory@2.1.1",
        "BomRef.bdjfpshl9d8.91evsm3i8n",
        "y18n@5.0.8",
        "yargs-parser@21.1.1"
      ]
    },
    {
      "ref": "node-redis-dump2@0.6.0",
      "dependsOn": [
        "async@3.2.6",
        "ioredis@5.5.0",
        "underscore@1.13.1"
      ]
    },
    {
      "ref": "underscore@1.13.1"
    },
    {
      "ref": "nyc@17.1.0",
      "dependsOn": [
        "@istanbuljs/load-nyc-config@1.1.0",
        "@istanbuljs/schema@0.1.3",
        "caching-transform@4.0.0",
        "nyc@17.1.0|convert-source-map@1.9.0",
        "decamelize@1.2.0",
        "find-cache-dir@3.3.2",
        "nyc@17.1.0|find-up@4.1.0",
        "nyc@17.1.0|foreground-child@3.3.0",
        "get-package-type@0.1.0",
        "glob@7.2.0",
        "istanbul-lib-coverage@3.2.0",
        "istanbul-lib-hook@3.0.0",
        "istanbul-lib-instrument@6.0.3",
        "istanbul-lib-processinfo@2.0.3",
        "istanbul-lib-report@3.0.0",
        "istanbul-lib-source-maps@4.0.1",
        "istanbul-reports@3.1.5",
        "make-dir@3.1.0",
        "node-preload@0.2.1",
        "nyc@17.1.0|p-map@3.0.0",
        "process-on-spawn@1.0.0",
        "resolve-from@5.0.0",
        "rimraf@3.0.2",
        "signal-exit@3.0.7",
        "spawn-wrap@2.0.0",
        "test-exclude@6.0.0",
        "nyc@17.1.0|yargs@15.4.1"
      ]
    },
    {
      "ref": "nyc@17.1.0|convert-source-map@1.9.0"
    },
    {
      "ref": "nyc@17.1.0|find-up@4.1.0",
      "dependsOn": [
        "nyc@17.1.0|locate-path@5.0.0",
        "path-exists@4.0.0"
      ]
    },
    {
      "ref": "nyc@17.1.0|locate-path@5.0.0",
      "dependsOn": [
        "nyc@17.1.0|p-locate@4.1.0"
      ]
    },
    {
      "ref": "nyc@17.1.0|p-locate@4.1.0",
      "dependsOn": [
        "nyc@17.1.0|p-limit@2.3.0"
      ]
    },
    {
      "ref": "nyc@17.1.0|p-limit@2.3.0",
      "dependsOn": [
        "p-try@2.2.0"
      ]
    },
    {
      "ref": "nyc@17.1.0|foreground-child@3.3.0",
      "dependsOn": [
        "cross-spawn@7.0.6",
        "nyc@17.1.0|foreground-child@3.3.0|signal-exit@4.1.0"
      ]
    },
    {
      "ref": "nyc@17.1.0|foreground-child@3.3.0|signal-exit@4.1.0"
    },
    {
      "ref": "nyc@17.1.0|p-map@3.0.0",
      "dependsOn": [
        "aggregate-error@3.1.0"
      ]
    },
    {
      "ref": "nyc@17.1.0|yargs@15.4.1",
      "dependsOn": [
        "nyc@17.1.0|cliui@6.0.0",
        "decamelize@1.2.0",
        "nyc@17.1.0|find-up@4.1.0",
        "get-caller-file@2.0.5",
        "require-directory@2.1.1",
        "require-main-filename@2.0.0",
        "set-blocking@2.0.0",
        "BomRef.bdjfpshl9d8.91evsm3i8n",
        "which-module@2.0.0",
        "nyc@17.1.0|y18n@4.0.3",
        "nyc@17.1.0|yargs-parser@18.1.3"
      ]
    },
    {
      "ref": "nyc@17.1.0|cliui@6.0.0",
      "dependsOn": [
        "BomRef.bdjfpshl9d8.91evsm3i8n",
        "strip-ansi@6.0.1",
        "nyc@17.1.0|wrap-ansi@6.2.0"
      ]
    },
    {
      "ref": "nyc@17.1.0|wrap-ansi@6.2.0",
      "dependsOn": [
        "ansi-styles@4.3.0",
        "BomRef.bdjfpshl9d8.91evsm3i8n",
        "strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "nyc@17.1.0|y18n@4.0.3"
    },
    {
      "ref": "nyc@17.1.0|yargs-parser@18.1.3",
      "dependsOn": [
        "camelcase@5.3.1",
        "decamelize@1.2.0"
      ]
    },
    {
      "ref": "@istanbuljs/load-nyc-config@1.1.0",
      "dependsOn": [
        "camelcase@5.3.1",
        "@istanbuljs/load-nyc-config@1.1.0|find-up@4.1.0",
        "get-package-type@0.1.0",
        "@istanbuljs/load-nyc-config@1.1.0|js-yaml@3.14.1",
        "resolve-from@5.0.0"
      ]
    },
    {
      "ref": "@istanbuljs/load-nyc-config@1.1.0|find-up@4.1.0",
      "dependsOn": [
        "@istanbuljs/load-nyc-config@1.1.0|locate-path@5.0.0",
        "path-exists@4.0.0"
      ]
    },
    {
      "ref": "@istanbuljs/load-nyc-config@1.1.0|locate-path@5.0.0",
      "dependsOn": [
        "@istanbuljs/load-nyc-config@1.1.0|p-locate@4.1.0"
      ]
    },
    {
      "ref": "@istanbuljs/load-nyc-config@1.1.0|p-locate@4.1.0",
      "dependsOn": [
        "@istanbuljs/load-nyc-config@1.1.0|p-limit@2.3.0"
      ]
    },
    {
      "ref": "@istanbuljs/load-nyc-config@1.1.0|p-limit@2.3.0",
      "dependsOn": [
        "p-try@2.2.0"
      ]
    },
    {
      "ref": "@istanbuljs/load-nyc-config@1.1.0|js-yaml@3.14.1",
      "dependsOn": [
        "@istanbuljs/load-nyc-config@1.1.0|argparse@1.0.10",
        "esprima@4.0.1"
      ]
    },
    {
      "ref": "@istanbuljs/load-nyc-config@1.1.0|argparse@1.0.10",
      "dependsOn": [
        "sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "camelcase@5.3.1"
    },
    {
      "ref": "p-try@2.2.0"
    },
    {
      "ref": "get-package-type@0.1.0"
    },
    {
      "ref": "sprintf-js@1.0.3"
    },
    {
      "ref": "esprima@4.0.1"
    },
    {
      "ref": "resolve-from@5.0.0"
    },
    {
      "ref": "@istanbuljs/schema@0.1.3"
    },
    {
      "ref": "caching-transform@4.0.0",
      "dependsOn": [
        "hasha@5.2.2",
        "make-dir@3.1.0",
        "package-hash@4.0.0",
        "write-file-atomic@3.0.3"
      ]
    },
    {
      "ref": "hasha@5.2.2",
      "dependsOn": [
        "is-stream@2.0.1",
        "type-fest@0.8.1"
      ]
    },
    {
      "ref": "is-stream@2.0.1"
    },
    {
      "ref": "type-fest@0.8.1"
    },
    {
      "ref": "make-dir@3.1.0",
      "dependsOn": [
        "make-dir@3.1.0|semver@6.3.1"
      ]
    },
    {
      "ref": "make-dir@3.1.0|semver@6.3.1"
    },
    {
      "ref": "package-hash@4.0.0",
      "dependsOn": [
        "graceful-fs@4.2.10",
        "hasha@5.2.2",
        "lodash.flattendeep@4.4.0",
        "release-zalgo@1.0.0"
      ]
    },
    {
      "ref": "graceful-fs@4.2.10"
    },
    {
      "ref": "lodash.flattendeep@4.4.0"
    },
    {
      "ref": "release-zalgo@1.0.0",
      "dependsOn": [
        "es6-error@4.1.1"
      ]
    },
    {
      "ref": "es6-error@4.1.1"
    },
    {
      "ref": "write-file-atomic@3.0.3",
      "dependsOn": [
        "imurmurhash@0.1.4",
        "is-typedarray@1.0.0",
        "signal-exit@3.0.7",
        "typedarray-to-buffer@3.1.5"
      ]
    },
    {
      "ref": "imurmurhash@0.1.4"
    },
    {
      "ref": "is-typedarray@1.0.0"
    },
    {
      "ref": "signal-exit@3.0.7"
    },
    {
      "ref": "typedarray-to-buffer@3.1.5",
      "dependsOn": [
        "is-typedarray@1.0.0"
      ]
    },
    {
      "ref": "decamelize@1.2.0"
    },
    {
      "ref": "find-cache-dir@3.3.2",
      "dependsOn": [
        "commondir@1.0.1",
        "make-dir@3.1.0",
        "pkg-dir@4.2.0"
      ]
    },
    {
      "ref": "commondir@1.0.1"
    },
    {
      "ref": "pkg-dir@4.2.0",
      "dependsOn": [
        "pkg-dir@4.2.0|find-up@4.1.0"
      ]
    },
    {
      "ref": "pkg-dir@4.2.0|find-up@4.1.0",
      "dependsOn": [
        "pkg-dir@4.2.0|locate-path@5.0.0",
        "path-exists@4.0.0"
      ]
    },
    {
      "ref": "pkg-dir@4.2.0|locate-path@5.0.0",
      "dependsOn": [
        "pkg-dir@4.2.0|p-locate@4.1.0"
      ]
    },
    {
      "ref": "pkg-dir@4.2.0|p-locate@4.1.0",
      "dependsOn": [
        "pkg-dir@4.2.0|p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg-dir@4.2.0|p-limit@2.3.0",
      "dependsOn": [
        "p-try@2.2.0"
      ]
    },
    {
      "ref": "path-key@3.1.1"
    },
    {
      "ref": "shebang-command@2.0.0",
      "dependsOn": [
        "shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "shebang-regex@3.0.0"
    },
    {
      "ref": "which@2.0.2",
      "dependsOn": [
        "isexe@2.0.0"
      ]
    },
    {
      "ref": "istanbul-lib-coverage@3.2.0"
    },
    {
      "ref": "istanbul-lib-hook@3.0.0",
      "dependsOn": [
        "append-transform@2.0.0"
      ]
    },
    {
      "ref": "append-transform@2.0.0",
      "dependsOn": [
        "default-require-extensions@3.0.1"
      ]
    },
    {
      "ref": "default-require-extensions@3.0.1",
      "dependsOn": [
        "strip-bom@4.0.0"
      ]
    },
    {
      "ref": "strip-bom@4.0.0"
    },
    {
      "ref": "istanbul-lib-instrument@6.0.3",
      "dependsOn": [
        "@babel/core@7.26.10",
        "@babel/parser@7.27.0",
        "@istanbuljs/schema@0.1.3",
        "istanbul-lib-coverage@3.2.0",
        "semver@7.5.4"
      ]
    },
    {
      "ref": "@babel/core@7.26.10",
      "dependsOn": [
        "@ampproject/remapping@2.3.0",
        "@babel/code-frame@7.26.2",
        "@babel/generator@7.27.0",
        "@babel/helper-compilation-targets@7.26.5",
        "@babel/helper-module-transforms@7.26.0",
        "@babel/helpers@7.27.0",
        "@babel/parser@7.27.0",
        "@babel/template@7.27.0",
        "@babel/traverse@7.27.0",
        "@babel/types@7.27.0",
        "@babel/core@7.26.10|convert-source-map@2.0.0",
        "debug@4.4.0",
        "gensync@1.0.0-beta.2",
        "json5@2.2.3",
        "@babel/core@7.26.10|semver@6.3.1"
      ]
    },
    {
      "ref": "@babel/core@7.26.10|convert-source-map@2.0.0"
    },
    {
      "ref": "@babel/core@7.26.10|semver@6.3.1"
    },
    {
      "ref": "@ampproject/remapping@2.3.0",
      "dependsOn": [
        "@jridgewell/gen-mapping@0.3.8",
        "@jridgewell/trace-mapping@0.3.25"
      ]
    },
    {
      "ref": "@jridgewell/gen-mapping@0.3.8",
      "dependsOn": [
        "@jridgewell/set-array@1.2.1",
        "@jridgewell/sourcemap-codec@1.5.0",
        "@jridgewell/trace-mapping@0.3.25"
      ]
    },
    {
      "ref": "@jridgewell/set-array@1.2.1"
    },
    {
      "ref": "@jridgewell/sourcemap-codec@1.5.0"
    },
    {
      "ref": "@jridgewell/trace-mapping@0.3.25",
      "dependsOn": [
        "@jridgewell/resolve-uri@3.1.2",
        "@jridgewell/sourcemap-codec@1.5.0"
      ]
    },
    {
      "ref": "@jridgewell/resolve-uri@3.1.2"
    },
    {
      "ref": "@babel/code-frame@7.26.2",
      "dependsOn": [
        "@babel/helper-validator-identifier@7.25.9",
        "js-tokens@4.0.0",
        "picocolors@1.1.1"
      ]
    },
    {
      "ref": "@babel/helper-validator-identifier@7.25.9"
    },
    {
      "ref": "js-tokens@4.0.0"
    },
    {
      "ref": "picocolors@1.1.1"
    },
    {
      "ref": "@babel/generator@7.27.0",
      "dependsOn": [
        "@babel/parser@7.27.0",
        "@babel/types@7.27.0",
        "@jridgewell/gen-mapping@0.3.8",
        "@jridgewell/trace-mapping@0.3.25",
        "jsesc@3.1.0"
      ]
    },
    {
      "ref": "@babel/parser@7.27.0",
      "dependsOn": [
        "@babel/types@7.27.0"
      ]
    },
    {
      "ref": "@babel/types@7.27.0",
      "dependsOn": [
        "@babel/helper-string-parser@7.25.9",
        "@babel/helper-validator-identifier@7.25.9"
      ]
    },
    {
      "ref": "jsesc@3.1.0"
    },
    {
      "ref": "@babel/helper-compilation-targets@7.26.5",
      "dependsOn": [
        "@babel/compat-data@7.26.8",
        "@babel/helper-validator-option@7.25.9",
        "browserslist@4.24.4",
        "@babel/helper-compilation-targets@7.26.5|lru-cache@5.1.1",
        "@babel/helper-compilation-targets@7.26.5|semver@6.3.1"
      ]
    },
    {
      "ref": "@babel/helper-compilation-targets@7.26.5|lru-cache@5.1.1",
      "dependsOn": [
        "@babel/helper-compilation-targets@7.26.5|yallist@3.1.1"
      ]
    },
    {
      "ref": "@babel/helper-compilation-targets@7.26.5|yallist@3.1.1"
    },
    {
      "ref": "@babel/helper-compilation-targets@7.26.5|semver@6.3.1"
    },
    {
      "ref": "@babel/compat-data@7.26.8"
    },
    {
      "ref": "@babel/helper-validator-option@7.25.9"
    },
    {
      "ref": "browserslist@4.24.4",
      "dependsOn": [
        "caniuse-lite@1.0.30001699",
        "electron-to-chromium@1.5.97",
        "node-releases@2.0.19",
        "update-browserslist-db@1.1.2"
      ]
    },
    {
      "ref": "caniuse-lite@1.0.30001699"
    },
    {
      "ref": "electron-to-chromium@1.5.97"
    },
    {
      "ref": "node-releases@2.0.19"
    },
    {
      "ref": "update-browserslist-db@1.1.2",
      "dependsOn": [
        "browserslist@4.24.4",
        "escalade@3.2.0",
        "picocolors@1.1.1"
      ]
    },
    {
      "ref": "escalade@3.2.0"
    },
    {
      "ref": "@babel/helper-module-transforms@7.26.0",
      "dependsOn": [
        "@babel/core@7.26.10",
        "@babel/helper-module-imports@7.25.9",
        "@babel/helper-validator-identifier@7.25.9",
        "@babel/traverse@7.27.0"
      ]
    },
    {
      "ref": "@babel/helper-module-imports@7.25.9",
      "dependsOn": [
        "@babel/traverse@7.27.0",
        "@babel/types@7.27.0"
      ]
    },
    {
      "ref": "@babel/traverse@7.27.0",
      "dependsOn": [
        "@babel/code-frame@7.26.2",
        "@babel/generator@7.27.0",
        "@babel/parser@7.27.0",
        "@babel/template@7.27.0",
        "@babel/types@7.27.0",
        "debug@4.4.0",
        "globals@11.12.0"
      ]
    },
    {
      "ref": "@babel/helpers@7.27.0",
      "dependsOn": [
        "@babel/template@7.27.0",
        "@babel/types@7.27.0"
      ]
    },
    {
      "ref": "@babel/template@7.27.0",
      "dependsOn": [
        "@babel/code-frame@7.26.2",
        "@babel/parser@7.27.0",
        "@babel/types@7.27.0"
      ]
    },
    {
      "ref": "globals@11.12.0"
    },
    {
      "ref": "@babel/helper-string-parser@7.25.9"
    },
    {
      "ref": "gensync@1.0.0-beta.2"
    },
    {
      "ref": "istanbul-lib-processinfo@2.0.3",
      "dependsOn": [
        "archy@1.0.0",
        "cross-spawn@7.0.6",
        "istanbul-lib-coverage@3.2.0",
        "istanbul-lib-processinfo@2.0.3|p-map@3.0.0",
        "rimraf@3.0.2",
        "uuid@8.3.2"
      ]
    },
    {
      "ref": "istanbul-lib-processinfo@2.0.3|p-map@3.0.0",
      "dependsOn": [
        "aggregate-error@3.1.0"
      ]
    },
    {
      "ref": "archy@1.0.0"
    },
    {
      "ref": "aggregate-error@3.1.0",
      "dependsOn": [
        "clean-stack@2.2.0",
        "indent-string@4.0.0"
      ]
    },
    {
      "ref": "rimraf@3.0.2",
      "dependsOn": [
        "glob@7.2.0"
      ]
    },
    {
      "ref": "uuid@8.3.2"
    },
    {
      "ref": "istanbul-lib-report@3.0.0",
      "dependsOn": [
        "istanbul-lib-coverage@3.2.0",
        "make-dir@3.1.0",
        "supports-color@7.2.0"
      ]
    },
    {
      "ref": "istanbul-lib-source-maps@4.0.1",
      "dependsOn": [
        "debug@4.4.0",
        "istanbul-lib-coverage@3.2.0",
        "istanbul-lib-source-maps@4.0.1|source-map@0.6.1"
      ]
    },
    {
      "ref": "istanbul-lib-source-maps@4.0.1|source-map@0.6.1"
    },
    {
      "ref": "istanbul-reports@3.1.5",
      "dependsOn": [
        "html-escaper@2.0.2",
        "istanbul-lib-report@3.0.0"
      ]
    },
    {
      "ref": "html-escaper@2.0.2"
    },
    {
      "ref": "node-preload@0.2.1",
      "dependsOn": [
        "process-on-spawn@1.0.0"
      ]
    },
    {
      "ref": "process-on-spawn@1.0.0",
      "dependsOn": [
        "fromentries@1.3.2"
      ]
    },
    {
      "ref": "clean-stack@2.2.0"
    },
    {
      "ref": "indent-string@4.0.0"
    },
    {
      "ref": "fromentries@1.3.2"
    },
    {
      "ref": "spawn-wrap@2.0.0",
      "dependsOn": [
        "foreground-child@2.0.0",
        "is-windows@1.0.2",
        "make-dir@3.1.0",
        "rimraf@3.0.2",
        "signal-exit@3.0.7",
        "which@2.0.2"
      ]
    },
    {
      "ref": "foreground-child@2.0.0",
      "dependsOn": [
        "cross-spawn@7.0.6",
        "signal-exit@3.0.7"
      ]
    },
    {
      "ref": "is-windows@1.0.2"
    },
    {
      "ref": "isexe@2.0.0"
    },
    {
      "ref": "test-exclude@6.0.0",
      "dependsOn": [
        "@istanbuljs/schema@0.1.3",
        "glob@7.2.0",
        "minimatch@3.1.2"
      ]
    },
    {
      "ref": "get-caller-file@2.0.5"
    },
    {
      "ref": "require-directory@2.1.1"
    },
    {
      "ref": "require-main-filename@2.0.0"
    },
    {
      "ref": "set-blocking@2.0.0"
    },
    {
      "ref": "which-module@2.0.0"
    },
    {
      "ref": "opener@1.5.2"
    },
    {
      "ref": "readline-browserify@0.0.4"
    },
    {
      "ref": "uglify-js@3.19.3"
    },
    {
      "ref": "cliui@8.0.1",
      "dependsOn": [
        "BomRef.bdjfpshl9d8.91evsm3i8n",
        "strip-ansi@6.0.1",
        "BomRef.f3brllupcfg.tfcordl7kb"
      ]
    },
    {
      "ref": "BomRef.f3brllupcfg.tfcordl7kb",
      "dependsOn": [
        "ansi-styles@4.3.0",
        "BomRef.bdjfpshl9d8.91evsm3i8n",
        "strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "y18n@5.0.8"
    }
  ]
}