{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:879e8793-e2ab-470e-9fff-12b6a1d7d24d", "version": 1, "metadata": { "timestamp": "2026-09-02T15:14:46Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "denque", "group": "", "version": "1.5.1", "description": "The fastest javascript implementation of a double-ended queue. Used by the official Redis, MongoDB, MariaDB & MySQL libraries for Node.js and many other libraries. Maintains compatability with deque.", "purl": "pkg:npm/denque@1.5.1", "bom-ref": "pkg:npm/denque@1.5.1", "author": "Invertase (http://github.com/invertase/)", "properties": [ { "name": "cdx:npm:scripts", "value": "test, coveralls, typescript, benchmark_thousand, benchmark_2mil, benchmark_splice, benchmark_remove, benchmark_removeOne" }, { "name": "cdx:license:category", "value": "Permissive" } ], "type": "application", "licenses": [ { "license": { "id": "Apache-2.0", "url": "https://opensource.org/licenses/Apache-2.0", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "externalReferences": [ { "type": "website", "url": "https://docs.page/invertase/denque" }, { "type": "vcs", "url": "git+https://github.com/invertase/denque.git" } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentNamespaces", "value": "@tootallnate" }, { "name": "cdx:bom:componentSrcFiles", "value": "package-lock.json" } ] }, "components": [ { "group": "", "name": "benchmark", "version": "2.1.4", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "09f3de31c916425d498cc2ee565a0ebf3c2a5629" } ], "purl": "pkg:npm/benchmark@2.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/benchmark/-/benchmark-2.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/benchmark@2.1.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/benchmark/-/benchmark-2.1.4.tgz" }, { "name": "ImportedModules", "value": "./print,benchmark" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "benchmark/remove.js", "line": 3 }, { "location": "benchmark/removeOne.js", "line": 3 }, { "location": "benchmark/splice.js", "line": 3 }, { "location": "benchmark/thousand.js", "line": 3 }, { "location": "benchmark/two_million.js", "line": 3 }, { "location": "benchmark/remove.js", "line": 5 }, { "location": "benchmark/removeOne.js", "line": 6 }, { "location": "benchmark/splice.js", "line": 5 }, { "location": "benchmark/thousand.js", "line": 5 }, { "location": "benchmark/two_million.js", "line": 5 } ] } }, { "group": "", "name": "lodash", "version": "4.17.20", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3e585d15c8a594e20d7de57b362ea81754c011acb2641a19f1b72c8531ea39825896bab344ae616a0a5a824cb9a381df0b3cddd534645cf305aba70a93dac698" } ], "purl": "pkg:npm/lodash@4.17.20", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash@4.17.20", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "platform", "version": "1.3.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7e759596351c853ae8e9188216f09705b36125cd8d8a337ba084316f0b322f46ee5893c6f39bfcd5e8651c8f5f5eb26c30d813a1f12858841e0a52a983114bae" } ], "purl": "pkg:npm/platform@1.3.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/platform/-/platform-1.3.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/platform@1.3.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/platform/-/platform-1.3.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "codecov", "version": "3.8.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "63c1f0f95dc7811ed5ef5c561f6bd0f65c92df9f026c60a5756949151d098abaa81ad3a86acdd1dff39c9514ef8146052b6f669892020cf6ae54a9a9a9bc2138" } ], "purl": "pkg:npm/codecov@3.8.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/codecov/-/codecov-3.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/codecov@3.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/codecov/-/codecov-3.8.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "argv", "version": "0.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7446a68693c4c11501a4b3477ae0a6feffa0d1a9c50721da871a1d54efc16c06ab1d504183631c702c1ff4afa8d4fa1ffb66ed7679097a56155168d6fd5ac04f" } ], "purl": "pkg:npm/argv@0.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/argv/-/argv-0.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/argv@0.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/argv/-/argv-0.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ignore-walk", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d8e888bca358cc440d73e05da14641ffc4de7da31e370dabcabc3de80e97eead194e272007a627c8c296ddbf59f88ede28bf48d2a70de44381a1267a412fa59" } ], "purl": "pkg:npm/ignore-walk@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ignore-walk/-/ignore-walk-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ignore-walk@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ignore-walk/-/ignore-walk-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450" } ], "purl": "pkg:npm/minimatch@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "89b4d199ab2bee49de164ea02b89ce462d71b767" } ], "purl": "pkg:npm/balanced-match@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "js-yaml", "version": "3.14.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" } ], "purl": "pkg:npm/js-yaml@3.14.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/js-yaml/-/js-yaml-3.14.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.14.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/js-yaml/-/js-yaml-3.14.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "argparse", "version": "1.0.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" } ], "purl": "pkg:npm/argparse@1.0.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/argparse@1.0.10", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "sprintf-js", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "04e6926f662895354f3dd015203633b857297e2c" } ], "purl": "pkg:npm/sprintf-js@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima/-/esprima-4.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "teeny-request", "version": "7.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8b063aae45b90c31aaf2113662035094a6e9b58a58e4d9f6c5e72342236339759b2b33c651f99e50109241b6ebdf4e9ded9ed4d8dd133e5fbf4b06117ee6b50e" } ], "purl": "pkg:npm/teeny-request@7.1.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/teeny-request/-/teeny-request-7.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/teeny-request@7.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/teeny-request/-/teeny-request-7.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "http-proxy-agent", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "934cdd360a964c603a69e211569bdf5686f87cbe767537da7a1ca583463852f4b24af3aafd8f813b23eb82952b03b1f296abd4f2f2191ac46e5e6b29b245744e" } ], "purl": "pkg:npm/http-proxy-agent@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/http-proxy-agent/-/http-proxy-agent-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/http-proxy-agent@4.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/http-proxy-agent/-/http-proxy-agent-4.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "@tootallnate", "name": "once", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "45bcc9be5373991ab97373b4f548a97ae5e7a38b40d4513a8a43a3c592b4b6ec55bf7e35da5eb8979b755b9a63e3eac9abdbe9926fe4c22474eda6579ec28fc7" } ], "purl": "pkg:npm/%40tootallnate/once@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@tootallnate/once/-/once-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/@tootallnate/once@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@tootallnate/once/-/once-1.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "agent-base", "version": "6.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "45937035c945efe312ffc6c383bd1a9a0df6772799199c620ee42667128b025423af78c6c8bc7ee0a924e7c50eec3d90760148402a2fb92b991129dee911ba5d" } ], "purl": "pkg:npm/agent-base@6.0.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/agent-base/-/agent-base-6.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/agent-base@6.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/agent-base/-/agent-base-6.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "4.4.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "446c305a7c10be455f6af295b76d8518bc3ec5849dcc04709b4aeee83853540dee994e6165cdbc57790ee2cb6062bcab4e52e9baf808f468a28e5b408cd6dca8" } ], "purl": "pkg:npm/debug@4.4.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-4.4.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.4.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-4.4.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "2.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394" } ], "purl": "pkg:npm/ms@2.1.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-2.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-2.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "https-proxy-agent", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7457008e94d0160a0b3330b657053e0bf09b4bbb912f49569b10c84e6aa6ec2fbb17439d9a3eacf65e9a95973a0042d786b9e080cd827964971c639d5f662dc0" } ], "purl": "pkg:npm/https-proxy-agent@5.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/https-proxy-agent@5.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "node-fetch", "version": "2.7.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7381517d49bf75b71667b53ed56ab40300b214bfb79edd9b130d39c1fc52cfe0d6a56b22b609928189b2d9d41d5b2282d7af7810b3ea32cfd8cd448da332edf0" } ], "purl": "pkg:npm/node-fetch@2.7.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/node-fetch/-/node-fetch-2.7.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/node-fetch@2.7.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/node-fetch/-/node-fetch-2.7.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "whatwg-url", "version": "5.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f" } ], "purl": "pkg:npm/whatwg-url@5.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/whatwg-url/-/whatwg-url-5.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/whatwg-url@5.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/whatwg-url/-/whatwg-url-5.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "tr46", "version": "0.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af" } ], "purl": "pkg:npm/tr46@0.0.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tr46/-/tr46-0.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tr46@0.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tr46/-/tr46-0.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "webidl-conversions", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79" } ], "purl": "pkg:npm/webidl-conversions@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/webidl-conversions/-/webidl-conversions-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/webidl-conversions@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/webidl-conversions/-/webidl-conversions-3.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "stream-events", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "135194cc14a0bdcb7c26c6f7bf65f5e698f3375b5879bb5b2da320f9e04e50e03181b2e849b4f6352f757247399490f529f2e321dfa35c9460a34aa757935eae" } ], "purl": "pkg:npm/stream-events@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stream-events/-/stream-events-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/stream-events@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stream-events/-/stream-events-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "stubs", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3dd1edee11d424ac6f4c281b297f42d55fdfb4e723250833f0167035f57973807a75c1aa9697a54db27df7d8c1199da36223c0c1c5f974fea807056506551bc7" } ], "purl": "pkg:npm/stubs@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubs/-/stubs-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/stubs@3.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stubs/-/stubs-3.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uuid", "version": "8.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f8d62cd9078c5b2f865853849bdc679fa1c20e9d25ed0043ee697cccb52627ef77439345d0da1c12b9f09139175453625f7fdfa42e9a7d2f0385bfe0cfb47b7a" } ], "purl": "pkg:npm/uuid@8.3.2", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uuid/-/uuid-8.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uuid@8.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/uuid/-/uuid-8.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "urlgrey", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8497c8ccc3c9988f4894b91bcbc42bb02ca443e4970de3b65b943d4135b7429a99553c786bf2bba7cff9abefe2b03f2fb1b55a160aa5fe0bc0a1009143609be7" } ], "purl": "pkg:npm/urlgrey@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/urlgrey/-/urlgrey-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/urlgrey@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/urlgrey/-/urlgrey-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-url-parser", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "e6338255700360db9190a173349d1d0827b0b19898a34773f1035896390ea450baaf653838198ab6f9bf4ecba1e30d5861d0ea0dbdf56bc4d584127638929da9" } ], "purl": "pkg:npm/fast-url-parser@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-url-parser/-/fast-url-parser-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-url-parser@1.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-url-parser/-/fast-url-parser-1.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "punycode", "version": "1.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e" } ], "purl": "pkg:npm/punycode@1.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.4.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "double-ended-queue", "version": "2.1.0-0", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "103d3527fd31528f40188130c841efdd78264e5c" } ], "purl": "pkg:npm/double-ended-queue@2.1.0-0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/double-ended-queue/-/double-ended-queue-2.1.0-0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/double-ended-queue@2.1.0-0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/double-ended-queue/-/double-ended-queue-2.1.0-0.tgz" }, { "name": "ImportedModules", "value": "double-ended-queue" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ], "occurrences": [ { "location": "benchmark/thousand.js", "line": 9 }, { "location": "benchmark/two_million.js", "line": 9 } ] } }, { "group": "", "name": "istanbul", "version": "0.4.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "65c7d73d4c4da84d4f3ac310b918fb0b8033733b" } ], "purl": "pkg:npm/istanbul@0.4.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/istanbul/-/istanbul-0.4.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/istanbul@0.4.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/istanbul/-/istanbul-0.4.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "abbrev", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "91b4792588a7738c25f35dd6f63752a2f8776135" } ], "purl": "pkg:npm/abbrev@1.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@1.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "async", "version": "1.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a" } ], "purl": "pkg:npm/async@1.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/async@1.5.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escodegen", "version": "1.8.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5a5b53af4693110bebb0867aa3430dd3b70a1018" } ], "purl": "pkg:npm/escodegen@1.8.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.8.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escodegen@1.8.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escodegen/-/escodegen-1.8.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "96e3b70d5779f6ad49cd032673d1c312767ba581" } ], "purl": "pkg:npm/esprima@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@2.7.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "estraverse", "version": "1.9.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "af67f2dc922582415950926091a4005d29c9bb44" } ], "purl": "pkg:npm/estraverse@1.9.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.9.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "esutils", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea" } ], "purl": "pkg:npm/esutils@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esutils@2.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "optionator", "version": "0.8.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f885bda4009d9375d69a64d71bc9b7ba919426cb795d11b3c4c4635f302e2755e720536f7e18e322e6240efcac9cf43bab3a95ccbb7bf010abba7b6a4615906c" } ], "purl": "pkg:npm/optionator@0.8.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/optionator/-/optionator-0.8.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/optionator@0.8.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/optionator/-/optionator-0.8.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "deep-is", "version": "0.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34" } ], "purl": "pkg:npm/deep-is@0.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fast-levenshtein", "version": "2.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3d8a5c66883a16a30ca8643e851f19baa7797917" } ], "purl": "pkg:npm/fast-levenshtein@2.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-levenshtein@2.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "levn", "version": "0.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3b09924edf9f083c0490fdd4c0bc4421e04764ee" } ], "purl": "pkg:npm/levn@0.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/levn@0.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "prelude-ls", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "21932a549f5e52ffd9a827f570e04be62a97da54" } ], "purl": "pkg:npm/prelude-ls@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/prelude-ls@1.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "type-check", "version": "0.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5884cab512cf1d355e3fb784f30804b2b520db72" } ], "purl": "pkg:npm/type-check@0.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/type-check@0.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "word-wrap", "version": "1.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1f3fe6acdc22b4d461fc7500b4cfd54ffe551feca00fa0d5ee660a640b473ab6ecf14ee5bcf4bac5fec424a305d2e5b52890a5d07ef4d60dd91aeb3e9ae139bd" } ], "purl": "pkg:npm/word-wrap@1.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/word-wrap@1.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "dab73fbcfc2ba819b4de03bd6f6eaa48164b3f9d" } ], "purl": "pkg:npm/source-map@0.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "amdefine", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5" } ], "purl": "pkg:npm/amdefine@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/amdefine@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "5.0.15", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1bc936b9e02f4a603fcc222ecf7633d30b8b93b1" } ], "purl": "pkg:npm/glob@5.0.15", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@5.0.15", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "purl": "pkg:npm/once@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "purl": "pkg:npm/wrappy@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "handlebars", "version": "4.7.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d5fd810027017e2c007d2b4229936b50282a359906b004fb50cde4918b57b8ba342a76957e328ec9fecf47307afbe68af524f24f53ddd9908f7b710639795e5c" } ], "purl": "pkg:npm/handlebars@4.7.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/handlebars@4.7.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "1.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14cf6735462b4410042d9413df179943b7e630e060ea758d989293720b0979a2ecb4ffd43835691acaf93a15e185783a7feaad27cba267e3d4c640d67202172f" } ], "purl": "pkg:npm/minimist@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "neo-async", "version": "2.6.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "61ddd4112e665824aa47ea8d4fddd2dd4a18524a8067d94b83c6bb83dae29ac5a66062bc7154e8038fec17746bb21772577b0018c5d5526a4c60ec3e74ba4ebb" } ], "purl": "pkg:npm/neo-async@2.6.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/neo-async@2.6.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee" } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "wordwrap", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "27584810891456a4171c8d0226441ade90cbcaeb" } ], "purl": "pkg:npm/wordwrap@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "uglify-js", "version": "3.12.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2f98b98e0fd21e412accdd7c8103135ac664dca7a546c7c3d7051536ab6ad24cea590a9c263c8bf32735a3c849811ad6aab025da65056e17f39c42288bbce2d8" } ], "purl": "pkg:npm/uglify-js@3.12.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.12.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@3.12.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.12.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "js-yaml", "version": "3.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6e5fe67d8b205ce4d22fad05b7781e8dadcc4b30" } ], "purl": "pkg:npm/js-yaml@3.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.6.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "34a98094449fea3306ca6d7ef91d116bbc2f855fb0156eb715a48e14fc116a1bde6b480c51c19485578083fd010b4c22bfd8a1e4d60f0755a7d54108d7f2fec5" } ], "purl": "pkg:npm/mkdirp@0.5.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "nopt", "version": "3.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c6465dbf08abcd4db359317f79ac68a646b28ff9" } ], "purl": "pkg:npm/nopt@3.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/nopt@3.0.6", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "1.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b" } ], "purl": "pkg:npm/resolve@1.1.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "3.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "65ac0504b3954171d8a64946b2ae3cbb8a5f54f6" } ], "purl": "pkg:npm/supports-color@3.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@3.2.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa" } ], "purl": "pkg:npm/has-flag@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "which", "version": "1.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221" } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/which/-/which-1.3.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "isexe", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10" } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mocha", "version": "3.5.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ffa9dad34d4c25612d6311ce57558b7ec991e182329e4504841c33b1bf9f936aa64378aab22db9f25fd0d8c58724c22601c36967c0c475800aef6347a0843d12" } ], "purl": "pkg:npm/mocha@3.5.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mocha@3.5.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mocha/-/mocha-3.5.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "browser-stdout", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f351d32969d32fa5d7a5567154263d928ae3bd1f" } ], "purl": "pkg:npm/browser-stdout@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/browser-stdout@1.3.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "2.9.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9c99094176e12240cb22d6c5146098400fe0f7d4" } ], "purl": "pkg:npm/commander@2.9.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.9.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.9.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "graceful-readlink", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4cafad76bc62f02fa039b2f94e9a3dd3a391a725" } ], "purl": "pkg:npm/graceful-readlink@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/graceful-readlink@1.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.6.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e731531ca2ede27d188222427da17821d68ff4fc" } ], "purl": "pkg:npm/debug@2.6.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5608aeadfc00be6c2901df5f9861788de0d597c8" } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c9ce393a4b7cbd0b058a725c93df299027868ff9" } ], "purl": "pkg:npm/diff@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "805211df04faaf1c63a3600306cdf5ade50b2ec8" } ], "purl": "pkg:npm/glob@7.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "growl", "version": "1.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0ea7743715db8d8de2c5ede1775e1b45ac85c02f" } ], "purl": "pkg:npm/growl@1.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/growl@1.9.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/growl/-/growl-1.9.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "he", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "93410fd21b009735151f8868c2f271f3427e23fd" } ], "purl": "pkg:npm/he@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/he@1.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/he/-/he-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "json3", "version": "3.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1" } ], "purl": "pkg:npm/json3@3.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json3@3.3.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.create", "version": "3.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d7f2849f0dbda7e04682bb8cd72ab022461debe7" } ], "purl": "pkg:npm/lodash.create@3.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.create@3.1.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.create/-/lodash.create-3.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._baseassign", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8c38a099500f215ad09e59f1722fd0c52bfe0a4e" } ], "purl": "pkg:npm/lodash._baseassign@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._baseassign@3.2.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._basecopy", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8da0e6a876cf344c0ad8a54882111dd3c5c7ca36" } ], "purl": "pkg:npm/lodash._basecopy@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._basecopy@3.0.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.keys", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dbc0472b156be50a0b286855d1bd0b0c656098a" } ], "purl": "pkg:npm/lodash.keys@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.keys@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._getnative", "version": "3.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "570bc7dede46d61cdcde687d65d3eecbaa3aaff5" } ], "purl": "pkg:npm/lodash._getnative@3.9.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._getnative@3.9.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] }, "tags": [ "native" ] }, { "group": "", "name": "lodash.isarguments", "version": "3.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2f573d85c6a24289ff00663b491c1d338ff3458a" } ], "purl": "pkg:npm/lodash.isarguments@3.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isarguments@3.1.0", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash.isarray", "version": "3.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "79e4eb88c36a8122af86f844aa9bcd851b5fbb55" } ], "purl": "pkg:npm/lodash.isarray@3.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash.isarray@3.0.4", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._basecreate", "version": "3.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1bc661614daa7fc311b7d03bf16806a0213cf821" } ], "purl": "pkg:npm/lodash._basecreate@3.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._basecreate@3.0.3", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-3.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "lodash._isiterateecall", "version": "3.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5203ad7ba425fae842460e696db9cf3e6aac057c" } ], "purl": "pkg:npm/lodash._isiterateecall@3.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.9", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "30057438eac6cf7f8c4767f38648d6697d75c903" } ], "purl": "pkg:npm/mkdirp@0.5.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.1", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "0.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "857fcabfc3397d2625b8228262e86aa7a011b05d" } ], "purl": "pkg:npm/minimist@0.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@0.0.8", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "3.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "72a262894d9d408b956ca05ff37b2ed8a6e2a2d5" } ], "purl": "pkg:npm/supports-color@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@3.1.2", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } }, { "group": "", "name": "typescript", "version": "3.9.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "04b6e2464881cc0c2c8eeb78c7f76c89b49307ac96a704f9a96982d8e7ee0a0dc68154024a032ce2f11cb583e1b1a1ad77401ebae1cc923676876586f0c4b347" } ], "purl": "pkg:npm/typescript@3.9.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/typescript/-/typescript-3.9.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/typescript@3.9.7", "properties": [ { "name": "SrcFile", "value": "package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/typescript/-/typescript-3.9.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "package-lock.json" } ], "concludedValue": "package-lock.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/lodash@4.17.20", "dependsOn": [] }, { "ref": "pkg:npm/platform@1.3.6", "dependsOn": [] }, { "ref": "pkg:npm/benchmark@2.1.4", "dependsOn": [ "pkg:npm/lodash@4.17.20", "pkg:npm/platform@1.3.6" ] }, { "ref": "pkg:npm/argv@0.0.2", "dependsOn": [] }, { "ref": "pkg:npm/balanced-match@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.0", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.0.4", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/ignore-walk@3.0.4", "dependsOn": [ "pkg:npm/minimatch@3.0.4" ] }, { "ref": "pkg:npm/sprintf-js@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/argparse@1.0.10", "dependsOn": [ "pkg:npm/sprintf-js@1.0.3" ] }, { "ref": "pkg:npm/esprima@4.0.1", "dependsOn": [] }, { "ref": "pkg:npm/js-yaml@3.14.1", "dependsOn": [ "pkg:npm/argparse@1.0.10", "pkg:npm/esprima@4.0.1" ] }, { "ref": "pkg:npm/@tootallnate/once@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/ms@2.1.3", "dependsOn": [] }, { "ref": "pkg:npm/debug@4.4.3", "dependsOn": [ "pkg:npm/ms@2.1.3" ] }, { "ref": "pkg:npm/agent-base@6.0.2", "dependsOn": [ "pkg:npm/debug@4.4.3" ] }, { "ref": "pkg:npm/http-proxy-agent@4.0.1", "dependsOn": [ "pkg:npm/@tootallnate/once@1.1.2", "pkg:npm/agent-base@6.0.2", "pkg:npm/debug@4.4.3" ] }, { "ref": "pkg:npm/https-proxy-agent@5.0.1", "dependsOn": [ "pkg:npm/agent-base@6.0.2", "pkg:npm/debug@4.4.3" ] }, { "ref": "pkg:npm/tr46@0.0.3", "dependsOn": [] }, { "ref": "pkg:npm/webidl-conversions@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/whatwg-url@5.0.0", "dependsOn": [ "pkg:npm/tr46@0.0.3", "pkg:npm/webidl-conversions@3.0.1" ] }, { "ref": "pkg:npm/node-fetch@2.7.0", "dependsOn": [ "pkg:npm/whatwg-url@5.0.0" ] }, { "ref": "pkg:npm/stubs@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/stream-events@1.0.5", "dependsOn": [ "pkg:npm/stubs@3.0.0" ] }, { "ref": "pkg:npm/uuid@8.3.2", "dependsOn": [] }, { "ref": "pkg:npm/teeny-request@7.1.1", "dependsOn": [ "pkg:npm/http-proxy-agent@4.0.1", "pkg:npm/https-proxy-agent@5.0.1", "pkg:npm/node-fetch@2.7.0", "pkg:npm/stream-events@1.0.5", "pkg:npm/uuid@8.3.2" ] }, { "ref": "pkg:npm/punycode@1.4.1", "dependsOn": [] }, { "ref": "pkg:npm/fast-url-parser@1.1.3", "dependsOn": [ "pkg:npm/punycode@1.4.1" ] }, { "ref": "pkg:npm/urlgrey@1.0.0", "dependsOn": [ "pkg:npm/fast-url-parser@1.1.3" ] }, { "ref": "pkg:npm/codecov@3.8.3", "dependsOn": [ "pkg:npm/argv@0.0.2", "pkg:npm/ignore-walk@3.0.4", "pkg:npm/js-yaml@3.14.1", "pkg:npm/teeny-request@7.1.1", "pkg:npm/urlgrey@1.0.0" ] }, { "ref": "pkg:npm/double-ended-queue@2.1.0-0", "dependsOn": [] }, { "ref": "pkg:npm/abbrev@1.0.9", "dependsOn": [] }, { "ref": "pkg:npm/async@1.5.2", "dependsOn": [] }, { "ref": "pkg:npm/esprima@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/estraverse@1.9.3", "dependsOn": [] }, { "ref": "pkg:npm/esutils@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/deep-is@0.1.3", "dependsOn": [] }, { "ref": "pkg:npm/fast-levenshtein@2.0.6", "dependsOn": [] }, { "ref": "pkg:npm/prelude-ls@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/type-check@0.3.2", "dependsOn": [ "pkg:npm/prelude-ls@1.1.2" ] }, { "ref": "pkg:npm/levn@0.3.0", "dependsOn": [ "pkg:npm/prelude-ls@1.1.2", "pkg:npm/type-check@0.3.2" ] }, { "ref": "pkg:npm/word-wrap@1.2.3", "dependsOn": [] }, { "ref": "pkg:npm/optionator@0.8.3", "dependsOn": [ "pkg:npm/deep-is@0.1.3", "pkg:npm/fast-levenshtein@2.0.6", "pkg:npm/levn@0.3.0", "pkg:npm/prelude-ls@1.1.2", "pkg:npm/type-check@0.3.2", "pkg:npm/word-wrap@1.2.3" ] }, { "ref": "pkg:npm/amdefine@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.2.0", "dependsOn": [ "pkg:npm/amdefine@1.0.1" ] }, { "ref": "pkg:npm/escodegen@1.8.1", "dependsOn": [ "pkg:npm/esprima@2.7.3", "pkg:npm/estraverse@1.9.3", "pkg:npm/esutils@2.0.3", "pkg:npm/optionator@0.8.3", "pkg:npm/source-map@0.2.0" ] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@5.0.15", "dependsOn": [ "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/minimist@1.2.5", "dependsOn": [] }, { "ref": "pkg:npm/neo-async@2.6.2", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/wordwrap@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/uglify-js@3.12.4", "dependsOn": [] }, { "ref": "pkg:npm/handlebars@4.7.6", "dependsOn": [ "pkg:npm/minimist@1.2.5", "pkg:npm/neo-async@2.6.2", "pkg:npm/source-map@0.6.1", "pkg:npm/uglify-js@3.12.4", "pkg:npm/wordwrap@1.0.0" ] }, { "ref": "pkg:npm/js-yaml@3.6.1", "dependsOn": [ "pkg:npm/argparse@1.0.10", "pkg:npm/esprima@2.7.3" ] }, { "ref": "pkg:npm/mkdirp@0.5.5", "dependsOn": [ "pkg:npm/minimist@1.2.5" ] }, { "ref": "pkg:npm/nopt@3.0.6", "dependsOn": [ "pkg:npm/abbrev@1.0.9" ] }, { "ref": "pkg:npm/resolve@1.1.7", "dependsOn": [] }, { "ref": "pkg:npm/has-flag@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@3.2.3", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/isexe@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/which@1.3.1", "dependsOn": [ "pkg:npm/isexe@2.0.0" ] }, { "ref": "pkg:npm/istanbul@0.4.5", "dependsOn": [ "pkg:npm/abbrev@1.0.9", "pkg:npm/async@1.5.2", "pkg:npm/escodegen@1.8.1", "pkg:npm/esprima@2.7.3", "pkg:npm/glob@5.0.15", "pkg:npm/handlebars@4.7.6", "pkg:npm/js-yaml@3.6.1", "pkg:npm/mkdirp@0.5.5", "pkg:npm/nopt@3.0.6", "pkg:npm/once@1.4.0", "pkg:npm/resolve@1.1.7", "pkg:npm/supports-color@3.2.3", "pkg:npm/which@1.3.1", "pkg:npm/wordwrap@1.0.0" ] }, { "ref": "pkg:npm/browser-stdout@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/graceful-readlink@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/commander@2.9.0", "dependsOn": [ "pkg:npm/graceful-readlink@1.0.1" ] }, { "ref": "pkg:npm/ms@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.6.8", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/diff@3.2.0", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.1.1", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.0.4", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/growl@1.9.2", "dependsOn": [] }, { "ref": "pkg:npm/he@1.1.1", "dependsOn": [] }, { "ref": "pkg:npm/json3@3.3.2", "dependsOn": [] }, { "ref": "pkg:npm/lodash._basecopy@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash._getnative@3.9.1", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarguments@3.1.0", "dependsOn": [] }, { "ref": "pkg:npm/lodash.isarray@3.0.4", "dependsOn": [] }, { "ref": "pkg:npm/lodash.keys@3.1.2", "dependsOn": [ "pkg:npm/lodash._getnative@3.9.1", "pkg:npm/lodash.isarguments@3.1.0", "pkg:npm/lodash.isarray@3.0.4" ] }, { "ref": "pkg:npm/lodash._baseassign@3.2.0", "dependsOn": [ "pkg:npm/lodash._basecopy@3.0.1", "pkg:npm/lodash.keys@3.1.2" ] }, { "ref": "pkg:npm/lodash._basecreate@3.0.3", "dependsOn": [] }, { "ref": "pkg:npm/lodash._isiterateecall@3.0.9", "dependsOn": [] }, { "ref": "pkg:npm/lodash.create@3.1.1", "dependsOn": [ "pkg:npm/lodash._baseassign@3.2.0", "pkg:npm/lodash._basecreate@3.0.3", "pkg:npm/lodash._isiterateecall@3.0.9" ] }, { "ref": "pkg:npm/minimist@0.0.8", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.1", "dependsOn": [ "pkg:npm/minimist@0.0.8" ] }, { "ref": "pkg:npm/supports-color@3.1.2", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/mocha@3.5.3", "dependsOn": [ "pkg:npm/browser-stdout@1.3.0", "pkg:npm/commander@2.9.0", "pkg:npm/debug@2.6.8", "pkg:npm/diff@3.2.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.1.1", "pkg:npm/growl@1.9.2", "pkg:npm/he@1.1.1", "pkg:npm/json3@3.3.2", "pkg:npm/lodash.create@3.1.1", "pkg:npm/mkdirp@0.5.1", "pkg:npm/supports-color@3.1.2" ] }, { "ref": "pkg:npm/typescript@3.9.7", "dependsOn": [] }, { "ref": "pkg:npm/denque@1.5.1", "dependsOn": [ "pkg:npm/benchmark@2.1.4", "pkg:npm/codecov@3.8.3", "pkg:npm/double-ended-queue@2.1.0-0", "pkg:npm/istanbul@0.4.5", "pkg:npm/mocha@3.5.3", "pkg:npm/typescript@3.9.7" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/denque@1.5.1" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-02T15:14:46Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, September 2, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'denque' with version '1.5.1'. The package type in this SBOM is npm with a single purl namespace '@tootallnate' described under components. The components were identified from the source files: package-lock.json." } ] }