{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:f6c70d9b-fc94-4dd3-a22b-130273be29f2",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-16T14:41:40Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "fstream",
      "group": "",
      "version": "1.0.12",
      "description": "Advanced file system stream things",
      "purl": "pkg:npm/fstream@1.0.12",
      "bom-ref": "pkg:npm/fstream@1.0.12",
      "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/fstream.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.15",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eae1d484e3c4060436e0733eafa6ff43059f66afb2885722a4a16b38588112759dcb9b1dcd8a22fa925e41a3c8e6a38b445a969805d43d036c89e97374ba1e70"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.15.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "graceful-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/dir-reader.js",
            "line": 7
          },
          {
            "location": "lib/file-reader.js",
            "line": 5
          },
          {
            "location": "lib/file-writer.js",
            "line": 3
          },
          {
            "location": "lib/link-reader.js",
            "line": 9
          },
          {
            "location": "lib/link-writer.js",
            "line": 3
          },
          {
            "location": "lib/proxy-reader.js",
            "line": 9
          },
          {
            "location": "lib/reader.js",
            "line": 3
          },
          {
            "location": "lib/writer.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "76c81b3b1c10ddee3a60bf2c247162bc369f8ba8"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "inherits"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/abstract.js",
            "line": 6
          },
          {
            "location": "lib/dir-reader.js",
            "line": 8
          },
          {
            "location": "lib/dir-writer.js",
            "line": 10
          },
          {
            "location": "lib/file-reader.js",
            "line": 6
          },
          {
            "location": "lib/file-writer.js",
            "line": 5
          },
          {
            "location": "lib/link-reader.js",
            "line": 10
          },
          {
            "location": "lib/link-writer.js",
            "line": 5
          },
          {
            "location": "lib/proxy-reader.js",
            "line": 8
          },
          {
            "location": "lib/proxy-writer.js",
            "line": 12
          },
          {
            "location": "lib/reader.js",
            "line": 5
          },
          {
            "location": "lib/socket-reader.js",
            "line": 8
          },
          {
            "location": "lib/writer.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1d73076a6df986cd9344e15e71fcc05a4c9abf12"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mkdirp"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/dir-writer.js",
            "line": 11
          },
          {
            "location": "lib/writer.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2a860f3f74bd7975002f73cb0b003b218ec351e4"
        }
      ],
      "purl": "pkg:npm/rimraf@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "rimraf"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/link-writer.js",
            "line": 7
          },
          {
            "location": "lib/writer.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "1.1.14",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "07078db5f6377f6321fceaaedf497de124dc9465"
        }
      ],
      "purl": "pkg:npm/graceful-fs@1.1.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.1.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.1.14.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "graceful-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/dir-reader.js",
            "line": 7
          },
          {
            "location": "lib/file-reader.js",
            "line": 5
          },
          {
            "location": "lib/file-writer.js",
            "line": 3
          },
          {
            "location": "lib/link-reader.js",
            "line": 9
          },
          {
            "location": "lib/link-writer.js",
            "line": 3
          },
          {
            "location": "lib/proxy-reader.js",
            "line": 9
          },
          {
            "location": "lib/reader.js",
            "line": 3
          },
          {
            "location": "lib/writer.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "standard",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57714540cae62344317b9f6ee8d21bde96031c4c"
        }
      ],
      "purl": "pkg:npm/standard@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/standard/-/standard-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/standard@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/standard/-/standard-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dezalgo",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2bc8b5a1683131764a98def7e4aa22105a688a5a"
        }
      ],
      "purl": "pkg:npm/dezalgo@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dezalgo@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2a45da5fdfa20b0496fc3768cc27c12fa916a7d"
        }
      ],
      "purl": "pkg:npm/asap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asap/-/asap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asap/-/asap-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1e65969965ccbc2db4548c6b84a6f2c5aedd4739"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint",
      "version": "0.21.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "beddf247800d4867f6b1051d224bdb83c2d201c7"
        }
      ],
      "purl": "pkg:npm/eslint@0.21.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint/-/eslint-0.21.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint/-/eslint-0.21.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b3cf4ed0ff5397c99c75b8f679db2f52831f96dc"
        }
      ],
      "purl": "pkg:npm/chalk@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b033f57f93e2d28adeb8bc11138fa13da0fd20a3"
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e2d8b25bc2555c3336723750e03f099c2735bb5"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c0b5b1615d9e382b0ff67169d967b425e48ca538"
        }
      ],
      "purl": "pkg:npm/has-ansi@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41c847194646375e6a1a5d10c3ca054ef9fc980d"
        }
      ],
      "purl": "pkg:npm/ansi-regex@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df62c1aa94ed2f114e1d0f21fd1d50482b79a60e"
        }
      ],
      "purl": "pkg:npm/strip-ansi@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15758df09d8ff3b4acc307539fabe27095e1042d"
        }
      ],
      "purl": "pkg:npm/supports-color@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.4.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8325bb89e55000e52b626d97466fde1a28cfe5d"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.4.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.4.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.4.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17d08d326b4423e568eff719f91b0b1cbdf69f1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "inherits"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/abstract.js",
            "line": 6
          },
          {
            "location": "lib/dir-reader.js",
            "line": 8
          },
          {
            "location": "lib/dir-writer.js",
            "line": 10
          },
          {
            "location": "lib/file-reader.js",
            "line": 6
          },
          {
            "location": "lib/file-writer.js",
            "line": 5
          },
          {
            "location": "lib/link-reader.js",
            "line": 10
          },
          {
            "location": "lib/link-writer.js",
            "line": 5
          },
          {
            "location": "lib/proxy-reader.js",
            "line": 8
          },
          {
            "location": "lib/proxy-writer.js",
            "line": 12
          },
          {
            "location": "lib/reader.js",
            "line": 5
          },
          {
            "location": "lib/socket-reader.js",
            "line": 8
          },
          {
            "location": "lib/writer.js",
            "line": 4
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6eef764f514c89e2b9e23146a75ba106756d23e"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.13.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b07085aef9a3ccac6ee53bf9d3df0c1521a5538"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f87057e995b1a1f6ae6a4960664137bc56f039da"
        }
      ],
      "purl": "pkg:npm/debug@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9cd13c03adbff25b65effde7ce864ee952017098"
        }
      ],
      "purl": "pkg:npm/ms@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "0.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81428491a942ef18b0492056eda3800eee57d61d"
        }
      ],
      "purl": "pkg:npm/doctrine@0.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-0.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@0.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-0.6.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c01ccaa9ae4b897c6d0c3e210ae52f3c7a844375"
        }
      ],
      "purl": "pkg:npm/esutils@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escope",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "92ca48f6286b380e4388e09188a904b0fa1d9b7e"
        }
      ],
      "purl": "pkg:npm/escope@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escope/-/escope-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escope@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escope/-/escope-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-map",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b879239ed7819e0b08c40ba6e19fa047ca7c8d1d"
        }
      ],
      "purl": "pkg:npm/es6-map@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-map@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da184c535d18d8ee7ba2aa229b914009fae11309"
        }
      ],
      "purl": "pkg:npm/d@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d/-/d-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d/-/d-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.10.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dfaea50721301042e2d89c1719d43493fa821656"
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.10.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-iterator",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6f58b8c4fc413c249b4baa19768f8e4d7c8944e"
        }
      ],
      "purl": "pkg:npm/es6-iterator@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-iterator@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "761b5c67cfd4f1d18afb234f691d678682cb3bf3"
        }
      ],
      "purl": "pkg:npm/es6-symbol@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-set",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "497cd235c9a2691f4caa0e33dd73ef86bde738ac"
        }
      ],
      "purl": "pkg:npm/es6-set@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-set@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9cf7fab2edaff1b1da8fe8e68bfe3f5aca6ca218"
        }
      ],
      "purl": "pkg:npm/es6-symbol@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df8e806541c68ab8ff20a79a1841b91abaa1bee4"
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-weak-map",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "706cef9e99aa236ba7766c239c8b9e286ea7d228"
        }
      ],
      "purl": "pkg:npm/es6-weak-map@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-weak-map@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8feb963699d4d1b2d65a576cd4b1296672a0f0e9"
        }
      ],
      "purl": "pkg:npm/esrecurse@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esrecurse/-/esrecurse-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15e28a446b8b82bc700ccc8b96c78af4da0d6cba"
        }
      ],
      "purl": "pkg:npm/estraverse@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "adaefd803ad501779e2063b357549ae3366fd14c"
        }
      ],
      "purl": "pkg:npm/espree@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ae46963243600206674ccb24a09e16674fcdca1"
        }
      ],
      "purl": "pkg:npm/estraverse@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse-fb",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "160e75a80e605b08ce894bcce2fe3e429abf92bf"
        }
      ],
      "purl": "pkg:npm/estraverse-fb@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse-fb/-/estraverse-fb-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse-fb@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse-fb/-/estraverse-fb-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "6.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8498032b3b6d1cc81eebc5f79690d8fe29fabf4f"
        }
      ],
      "purl": "pkg:npm/globals@6.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-6.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@6.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-6.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "0.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbd740cf6ca3b731296a63ce6f6d961851f336df"
        }
      ],
      "purl": "pkg:npm/inquirer@0.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@0.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-0.8.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-width",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14d4f6870234d91e97f7dd81e76be8271410a1ef"
        }
      ],
      "purl": "pkg:npm/cli-width@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-width/-/cli-width-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1a31f4e1d2c2938ecde5c06aa16134cf29f4771"
        }
      ],
      "purl": "pkg:npm/figures@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/figures/-/figures-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figures@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/figures/-/figures-1.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0159e86832feffc6d61d852b12a953b99496bd32"
        }
      ],
      "purl": "pkg:npm/lodash@3.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readline2",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "99443ba6e83b830ef3051bfd7dc241a82728d568"
        }
      ],
      "purl": "pkg:npm/readline2@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readline2/-/readline2-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readline2@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readline2/-/readline2-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9219960a6d5d5d046597aee51252c6655f7177e"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "52f236b5a6d24e538aa1fba88152909322a02886"
        }
      ],
      "purl": "pkg:npm/rx@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-2.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fcc3690fed2fdf98c6fc88b4d207a4624ac3b87"
        }
      ],
      "purl": "pkg:npm/through@2.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca1acd3423ec275d12140a7bab51db015ba0b3c0"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcfae39059656d1973d0b9e6a1a74154b5a9a136"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11e4d84ff32144e35b0bf3a66f8587f38d8f9978"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4292c1d68e4173d815fa2290dc7afc96d81fcd83"
        }
      ],
      "purl": "pkg:npm/esprima@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0bc20f6bf3570a698ef0ddff902063c6cabda6bf"
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9b7d03c03f37bc704be100e522b40db8f6cfcd9"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "38f6730c03aab6d5edbb52bd934885e756d71674"
        }
      ],
      "purl": "pkg:npm/balanced-match@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f8309b09083b01261ece3ef7373f2b57b8dd7042"
        }
      ],
      "purl": "pkg:npm/object-assign@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optionator",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b75a8995a2d417df25b6e4e3862f50aa88651368"
        }
      ],
      "purl": "pkg:npm/optionator@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optionator/-/optionator-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-is",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34"
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-levenshtein",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3bedb184e39f95cb0d88928688e6b1ee3273446a"
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "levn",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba8d339d0ca4a610e3a3f145b9caf48807155054"
        }
      ],
      "purl": "pkg:npm/levn@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/levn/-/levn-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/levn/-/levn-0.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prelude-ls",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21932a549f5e52ffd9a827f570e04be62a97da54"
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-check",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9233923c4da174d0ac5480ecfd6ef84c349eb58d"
        }
      ],
      "purl": "pkg:npm/type-check@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-check/-/type-check-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "263dada66ab3f2fb10bf7f9d24dd8f3e570ef912"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a48ab96023dbac1b7b8d0ffabf6f63f1677be9f"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b5be23a32b63a7c9deb8d0f28d485724a3df190"
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml-escape",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00963d697b2adf0c185c4e04e73174ba9b288eb2"
        }
      ],
      "purl": "pkg:npm/xml-escape@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml-escape/-/xml-escape-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml-escape@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml-escape/-/xml-escape-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "eslint-config-standard",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2523ac17c9a91b832ea2e895f2093189c3a8c6c8"
        }
      ],
      "purl": "pkg:npm/eslint-config-standard@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-config-standard/-/eslint-config-standard-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-standard@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-config-standard/-/eslint-config-standard-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-react",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "667b6d51fde2be2b904e4387d92ec64c60ea7eba"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-react@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-react@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-root",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f636d46f3e75f085f3289eb7c7791e5039a377ca"
        }
      ],
      "purl": "pkg:npm/find-root@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-root/-/find-root-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-root@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-root/-/find-root-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "5.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ee350319f31f352cef6899a48f6b6b7834c6899"
        }
      ],
      "purl": "pkg:npm/glob@5.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-5.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@5.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-5.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6cbb4521ebd51ce0ec0a936bfd7657ef7e9b172a"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8feeca93b039ec1dcdee7741c92bdac5e28081b"
        }
      ],
      "purl": "pkg:npm/once@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "2.2.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6bd552185e0d1cd393b416603ee686879ec3bc3b"
        }
      ],
      "purl": "pkg:npm/ignore@2.2.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-2.2.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@2.2.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-2.2.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1bc2bc71658cdca5712475684363615b0b4f695b"
        }
      ],
      "purl": "pkg:npm/minimist@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-parallel",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "043c1f40e5ea94485f6858b79c6ca08254d0720e"
        }
      ],
      "purl": "pkg:npm/run-parallel@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-parallel@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "standard-format",
      "version": "1.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77bf29087cf15a037c84cb9c51972d9f974e8639"
        }
      ],
      "purl": "pkg:npm/standard-format@1.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/standard-format/-/standard-format-1.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/standard-format@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/standard-format/-/standard-format-1.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esformatter",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b0bac9b1bde3793bc0cff2c590f940cc86ad4bc4"
        }
      ],
      "purl": "pkg:npm/esformatter@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esformatter/-/esformatter-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esformatter@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esformatter/-/esformatter-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "0.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06e1ea8082c2cb14e39806e22e2f6f757f92af39"
        }
      ],
      "purl": "pkg:npm/debug@0.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-0.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-0.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mout",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "93cdf0791ac8a24873ceeb42a5b016b7c867abee"
        }
      ],
      "purl": "pkg:npm/mout@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mout/-/mout-0.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mout@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mout/-/mout-0.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c4312451f382b7aee7a4858e60283abf3dbac8ec"
        }
      ],
      "purl": "pkg:npm/npm-run@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run/-/npm-run-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run/-/npm-run-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "15d750efc9d8808194c721481dfa210fbde415c5"
        }
      ],
      "purl": "pkg:npm/npm-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-path/-/npm-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-path/-/npm-path-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ce512459946166e12c083f08ec073380fc8cbbb"
        }
      ],
      "purl": "pkg:npm/which@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "847491119fccb5fb436217cc737f7faad50f603f"
        }
      ],
      "purl": "pkg:npm/is-absolute@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute/-/is-absolute-0.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-relative",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "905fee8ae86f45b3ec614bc3c15c869df0876e82"
        }
      ],
      "purl": "pkg:npm/is-relative@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-relative/-/is-relative-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-relative@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-relative/-/is-relative-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serializerr",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7351615fc06a6f1756a6070bb4e8d27c4149a53f"
        }
      ],
      "purl": "pkg:npm/serializerr@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serializerr/-/serializerr-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serializerr@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serializerr/-/serializerr-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "protochain",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "92115581c8bc0382a7ad0d0c78a355173633de50"
        }
      ],
      "purl": "pkg:npm/protochain@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/protochain/-/protochain-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/protochain@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/protochain/-/protochain-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sync-exec",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f7258e4a5ba17245381909fa6a6f6cf506e1661"
        }
      ],
      "purl": "pkg:npm/sync-exec@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sync-exec/-/sync-exec-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sync-exec@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sync-exec/-/sync-exec-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de3f98543dbf96082be48ad1a0c7cda836301dcf"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3492ad054ca800f5befa612e61beac1eec98f8f"
        }
      ],
      "purl": "pkg:npm/resolve@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rocambole",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "534f235a287cc17f9b057b95bd11d0f0dc35452c"
        }
      ],
      "purl": "pkg:npm/rocambole@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rocambole/-/rocambole-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rocambole@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rocambole/-/rocambole-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rocambole-indent",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a18a24977ca0400b861daa4631e861dcb52d085c"
        }
      ],
      "purl": "pkg:npm/rocambole-indent@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rocambole-indent/-/rocambole-indent-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rocambole-indent@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rocambole-indent/-/rocambole-indent-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rocambole-token",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c785df7428dc3cb27ad7897047bd5238cc070d35"
        }
      ],
      "purl": "pkg:npm/rocambole-token@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rocambole-token/-/rocambole-token-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rocambole-token@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rocambole-token/-/rocambole-token-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rocambole-linebreak",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63f62b110c1108e7184460f9d2bac31b94c5c3c0"
        }
      ],
      "purl": "pkg:npm/rocambole-linebreak@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rocambole-linebreak/-/rocambole-linebreak-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rocambole-linebreak@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rocambole-linebreak/-/rocambole-linebreak-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "300bc6e0e86374f7ba61068b5b1ecd57fc6532da"
        }
      ],
      "purl": "pkg:npm/semver@4.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rocambole-node",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "db5b49de7407b0080dd514872f28e393d0f7ff3f"
        }
      ],
      "purl": "pkg:npm/rocambole-node@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rocambole-node/-/rocambole-node-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rocambole-node@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rocambole-node/-/rocambole-node-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rocambole-whitespace",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63330949256b29941f59b190459f999c6b1d3bf9"
        }
      ],
      "purl": "pkg:npm/rocambole-whitespace@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rocambole-whitespace/-/rocambole-whitespace-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rocambole-whitespace@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rocambole-whitespace/-/rocambole-whitespace-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21065f70727ad053a0dd5e957ac9e00c7560d90a"
        }
      ],
      "purl": "pkg:npm/repeat-string@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7941182b3ffcc580bff1c17942acdf7951c0d213"
        }
      ],
      "purl": "pkg:npm/semver@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stdin",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3041981aaec3dfdbc77a1b38d6372e38f5fb71e"
        }
      ],
      "purl": "pkg:npm/stdin@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stdin/-/stdin-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stdin@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stdin/-/stdin-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "164c64e370a8a3cc00c9e01b539e569823f0ee54"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esformatter-eol-last",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45a78ff4622b1d49e44f56b49905766a63290c07"
        }
      ],
      "purl": "pkg:npm/esformatter-eol-last@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esformatter-eol-last/-/esformatter-eol-last-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esformatter-eol-last@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esformatter-eol-last/-/esformatter-eol-last-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string.prototype.endswith",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a19c20dee51a98777e9a47e10f09be393b9bba75"
        }
      ],
      "purl": "pkg:npm/string.prototype.endswith@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string.prototype.endswith/-/string.prototype.endswith-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.endswith@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string.prototype.endswith/-/string.prototype.endswith-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esformatter-literal-notation",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d0201d0406993044aaaf38d32548425cacb538e5"
        }
      ],
      "purl": "pkg:npm/esformatter-literal-notation@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esformatter-literal-notation/-/esformatter-literal-notation-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esformatter-literal-notation@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esformatter-literal-notation/-/esformatter-literal-notation-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rocambole",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4debbf5943144bc7b6006d95be8facc0b74352a7"
        }
      ],
      "purl": "pkg:npm/rocambole@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rocambole/-/rocambole-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rocambole@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rocambole/-/rocambole-0.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f557e08fc3b4d26ece9dd34f8fbf476b62585ad"
        }
      ],
      "purl": "pkg:npm/esprima@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esformatter-quotes",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ecbf4bdde4672792f61e7bea62e78b272b54315c"
        }
      ],
      "purl": "pkg:npm/esformatter-quotes@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esformatter-quotes/-/esformatter-quotes-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esformatter-quotes@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esformatter-quotes/-/esformatter-quotes-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esformatter-spaced-lined-comment",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc5f3407f93c295e1e56446bd344560da5e6dcac"
        }
      ],
      "purl": "pkg:npm/esformatter-spaced-lined-comment@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esformatter-spaced-lined-comment/-/esformatter-spaced-lined-comment-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esformatter-spaced-lined-comment@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esformatter-spaced-lined-comment/-/esformatter-spaced-lined-comment-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6cb73d3226c1efef04de3c56d012f03377ee15f"
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uniq",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b31c5ae8254844a3a8281541ce2b04b865a734ff"
        }
      ],
      "purl": "pkg:npm/uniq@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uniq/-/uniq-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uniq@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uniq/-/uniq-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8bc36ff87aedbe7ce9eaf0bca36b2354a743840f"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tap",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7d4dc3ffa70becce161957d2f4687451f8d21faa"
        }
      ],
      "purl": "pkg:npm/tap@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tap/-/tap-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tap/-/tap-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-equal",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "91bc74b11ea405bc916bc6aa908faafa5b4aac4b"
        }
      ],
      "purl": "pkg:npm/buffer-equal@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-equal/-/buffer-equal-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-equal@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-equal/-/buffer-equal-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coveralls",
      "version": "2.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4d982016cb2f9da89d77ab204d86a8537e6a12d"
        }
      ],
      "purl": "pkg:npm/coveralls@2.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coveralls/-/coveralls-2.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coveralls@2.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coveralls/-/coveralls-2.11.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "76405fea5bce30fc8f405d48c6dca7f0a32c6afe"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "0.1.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfd01e0fbba3d6caed049fbd758d40f65196f57c"
        }
      ],
      "purl": "pkg:npm/argparse@0.1.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-0.1.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@0.1.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-0.1.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6bbaf0877500d36be34ecaa584e0db9fef035209"
        }
      ],
      "purl": "pkg:npm/underscore@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore.string",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8cdd8fbac4e2d2ea1e7e2e8097c42f442280f85b"
        }
      ],
      "purl": "pkg:npm/underscore.string@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore.string@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcov-parse",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "819e5da8bf0791f9d3f39eea5ed1868187f11175"
        }
      ],
      "purl": "pkg:npm/lcov-parse@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcov-parse@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-driver",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d62d7faef45d8a71341961a04b0761eca99cfa3"
        }
      ],
      "purl": "pkg:npm/log-driver@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-driver@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "request",
      "version": "2.40.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4dd670f696f1e6e842e66b4b5e839301ab9beb67"
        }
      ],
      "purl": "pkg:npm/request@2.40.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.40.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.40.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.40.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d0e09c4921f94a27f63d3b49c5feff1ea4c5130"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "995ae1392ab8affcbfcb2641dd054e943c0d5dce"
        }
      ],
      "purl": "pkg:npm/mime-types@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-uuid",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "319bb7a56e7cb63f00b5c0cd7851cd4b4ddf1df9"
        }
      ],
      "purl": "pkg:npm/node-uuid@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-uuid@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50a93e2b5af6691c31bcea5dae78ee6ea1903768"
        }
      ],
      "purl": "pkg:npm/qs@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c57103f7a17fc037f02d7c2e64b602ea223f7d63"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "91abd788aba9702b1aabfa8bc01031a2ac9e3b12"
        }
      ],
      "purl": "pkg:npm/form-data@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aea74d5e61c1f899613bf64bda66d4c78f2fd17d"
        }
      ],
      "purl": "pkg:npm/async@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0137e657baa5a7541c57ac37ac5fc07d73b4dc1f"
        }
      ],
      "purl": "pkg:npm/combined-stream@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4b1f43a93e8296dfe02694f4680bc37a313c73f"
        }
      ],
      "purl": "pkg:npm/delayed-stream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "58203eed86e3a5ef17aed2b7d9ebd47f0a60dd10"
        }
      ],
      "purl": "pkg:npm/mime@1.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87cd491f9b46e4e2aeaca335416766885d2d1ed9"
        }
      ],
      "purl": "pkg:npm/hawk@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a636e9ded4efcefb19cef4947a3c67dfaee911b"
        }
      ],
      "purl": "pkg:npm/boom@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d322462badf07716ea7eb85baf88079cddce505"
        }
      ],
      "purl": "pkg:npm/hoek@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed91ff1f17ad13d3748288594f8a48a0d26f325c"
        }
      ],
      "purl": "pkg:npm/cryptiles@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb885f18b0f3aad189f824862536bceeec750900"
        }
      ],
      "purl": "pkg:npm/sntp@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fbdac132559aa8323121e540779c0a012b27e66"
        }
      ],
      "purl": "pkg:npm/http-signature@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "559be18376d08a4ec4dbe80877d27818639b2df7"
        }
      ],
      "purl": "pkg:npm/asn1@0.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ee74009413002d84cec7219c6ac811812e723160"
        }
      ],
      "purl": "pkg:npm/assert-plus@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ctype",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82c18c2461f74114ef16c135224ad0b9144ca12f"
        }
      ],
      "purl": "pkg:npm/ctype@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ctype@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cb540f93bb2b22a7d5941691a288d60e8ea9386e"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringstream",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f0e3423f942960b5692ac324a57dd093bc41a92"
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringstream@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b7e9d98e769e80b5aa899d944fe44e02ebf82ad"
        }
      ],
      "purl": "pkg:npm/tough-cookie@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b1184e312ffbcf70b3b4c78e8c219de7ebb1c550"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4564f07d2f0ab3e46110bec16592abd7dc2e326"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreground-child",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6849d460f4ef5db854bb67777613a696226d8d75"
        }
      ],
      "purl": "pkg:npm/foreground-child@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/foreground-child/-/foreground-child-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "375879b1f92ebc3b334480d038dc546a6d558564"
        }
      ],
      "purl": "pkg:npm/signal-exit@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nyc",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73ef453a65ae9f880c77b966c3d833f4a32a80e9"
        }
      ],
      "purl": "pkg:npm/nyc@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nyc/-/nyc-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nyc@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nyc/-/nyc-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul",
      "version": "0.3.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e0aa144cfdde6bb7111124c8b425c6bf53ffc1e"
        }
      ],
      "purl": "pkg:npm/istanbul@0.3.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul/-/istanbul-0.3.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul@0.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul/-/istanbul-0.3.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b6035b2ee9d4fb5cf859f08a9be81b208491843"
        }
      ],
      "purl": "pkg:npm/abbrev@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "367de17d8510540d12bc6dcb8b3f918391265815"
        }
      ],
      "purl": "pkg:npm/escodegen@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escodegen/-/escodegen-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0993502feaf668138325756f30f9a51feeec11e9"
        }
      ],
      "purl": "pkg:npm/esprima@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af67f2dc922582415950926091a4005d29c9bb44"
        }
      ],
      "purl": "pkg:npm/estraverse@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bc146ca517c1471f5dacbe2571b2b7f9e3346"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ca9735cf1dde0edf7a4bf6641709c8024f9b227"
        }
      ],
      "purl": "pkg:npm/amdefine@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c1c9fb94975dfcc3fc71c60f074f3c5156a28ef5"
        }
      ],
      "purl": "pkg:npm/esprima@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fileset",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "acc423bfaf92843385c66bf75822264d11b7bd94"
        }
      ],
      "purl": "pkg:npm/fileset@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fileset/-/fileset-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fileset@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fileset/-/fileset-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a973f635b9190f715d10987d5c00fd2815ebe3d"
        }
      ],
      "purl": "pkg:npm/glob@3.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "275d8edaac4f1bb3326472089e7949c8394699dd"
        }
      ],
      "purl": "pkg:npm/minimatch@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2675190ccd1b0701ec2f652a4d0d3d400d76c0dd"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.6.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ff21f198cad2175f9f3b781853fd94d0d19b590"
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd2c7d060d2c8c8fd7cde7f1f2ed2d5b270fdb1b"
        }
      ],
      "purl": "pkg:npm/minimatch@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f4e537f4dd6992869d66c01b7505eba3561a5d5"
        }
      ],
      "purl": "pkg:npm/handlebars@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa0984770b428b7a9b2a8058f46355d14fef211a"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b6bbe0b0674b9d719708ca38de8c237cb526c3d1"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c90941ad59e4273328923074d2cf2e7cbc6ec0d9"
        }
      ],
      "purl": "pkg:npm/optimist@0.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a82a87f9d8c3df140fe78fb29657a7a774403b5e"
        }
      ],
      "purl": "pkg:npm/nopt@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "460c1da0f810103d0321a9b633af9e575e64486f"
        }
      ],
      "purl": "pkg:npm/which@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.3.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82d9bc1b2fcf31e205ac7b28138a025d08e9159a"
        }
      ],
      "purl": "pkg:npm/rimraf@2.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.3.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "rimraf"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/link-writer.js",
            "line": 7
          },
          {
            "location": "lib/writer.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spawn-wrap",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c9354ed2a37f7e05b367cc01627d16833e06ebb"
        }
      ],
      "purl": "pkg:npm/spawn-wrap@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spawn-wrap@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spawn-wrap/-/spawn-wrap-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85b8862f3844b5a6d5ec8467a93598173a36f794"
        }
      ],
      "purl": "pkg:npm/strip-bom@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "first-chunk-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59bfb50cd905f60d7c394cd3d9acaab4e6ad934e"
        }
      ],
      "purl": "pkg:npm/first-chunk-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/first-chunk-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b8aa54125ae626bfe4e3beb965f16a89c58a1137"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1"
        }
      ],
      "purl": "pkg:npm/yargs@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "953b25c3bc98671ee59a44cb9d542672da7331b9"
        }
      ],
      "purl": "pkg:npm/camelcase@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b475760ff80264c762c3a1719032e91c7fea0d1"
        }
      ],
      "purl": "pkg:npm/cliui@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "center-align",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "54d204bfa61b3fefb786cfd8482f7c4e090231cd"
        }
      ],
      "purl": "pkg:npm/center-align@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/center-align@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/center-align/-/center-align-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "align-text",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "576a56ded8fca0a9840c05064a0e93f35771b29f"
        }
      ],
      "purl": "pkg:npm/align-text@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/align-text@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/align-text/-/align-text-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "140a3d2d41a36d2efcfa9377b62c24f8495a5c44"
        }
      ],
      "purl": "pkg:npm/kind-of@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "longest",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30a0b2da38f73770e8294a0d22e6625ed77d0097"
        }
      ],
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/longest@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "right-align",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dd413fb6f766aa0039bc9615c0df11a645ef5838"
        }
      ],
      "purl": "pkg:npm/right-align@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/right-align@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/right-align/-/right-align-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b79669bb42ecb409f83d583cad52ca17eaa1643f"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5287122f71691d4505b18ff2258dc400a5b23847"
        }
      ],
      "purl": "pkg:npm/decamelize@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5438cd2ea93b202efa3a19fe8887aee7c94f9c9d"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opener",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "897590acd1aed3311b703b58bccb4d43f56f2895"
        }
      ],
      "purl": "pkg:npm/opener@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/opener/-/opener-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/opener@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/opener/-/opener-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tap-mocha-reporter",
      "version": "0.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e06f5afd2a401ca959efe335ca0b1526acee8681"
        }
      ],
      "purl": "pkg:npm/tap-mocha-reporter@0.0.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tap-mocha-reporter/-/tap-mocha-reporter-0.0.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap-mocha-reporter@0.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tap-mocha-reporter/-/tap-mocha-reporter-0.0.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f28d2eb9ee7b15a97efd89ce63dcfdaa3ccbabf"
        }
      ],
      "purl": "pkg:npm/diff@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tap-parser",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06f1c5d54d6b997b03c6552317c48fb7990693e3"
        }
      ],
      "purl": "pkg:npm/tap-parser@1.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/tap-parser@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "events-to-array",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b3484465534fe4ff66fbdd1a83b777713ba404aa"
        }
      ],
      "purl": "pkg:npm/events-to-array@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events-to-array/-/events-to-array-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-to-array@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events-to-array/-/events-to-array-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/graceful-fs@4.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.0",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@1.1.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rimraf@2.0.2",
      "dependsOn": [
        "pkg:npm/graceful-fs@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/asap@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dezalgo@1.0.2",
      "dependsOn": [
        "pkg:npm/asap@1.0.0",
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@1.0.3",
      "dependsOn": [
        "pkg:npm/ansi-regex@1.1.1",
        "pkg:npm/get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@2.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.0.1",
        "pkg:npm/escape-string-regexp@1.0.3",
        "pkg:npm/has-ansi@1.0.3",
        "pkg:npm/strip-ansi@2.0.1",
        "pkg:npm/supports-color@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.13",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.1",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.4.8",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/ms@0.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.2.0",
      "dependsOn": [
        "pkg:npm/ms@0.7.1"
      ]
    },
    {
      "ref": "pkg:npm/esutils@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@0.6.4",
      "dependsOn": [
        "pkg:npm/esutils@1.1.6",
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@2.0.1",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.7"
      ]
    },
    {
      "ref": "pkg:npm/es6-iterator@0.1.3",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.7",
        "pkg:npm/es6-symbol@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es5-ext@0.10.7",
      "dependsOn": [
        "pkg:npm/es6-iterator@0.1.3",
        "pkg:npm/es6-symbol@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d@0.1.1",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.7"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@0.1.1",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.7"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter@0.3.3",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.7"
      ]
    },
    {
      "ref": "pkg:npm/es6-set@0.1.1",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.7",
        "pkg:npm/es6-iterator@0.1.3",
        "pkg:npm/es6-symbol@0.1.1",
        "pkg:npm/event-emitter@0.3.3"
      ]
    },
    {
      "ref": "pkg:npm/es6-map@0.1.1",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.7",
        "pkg:npm/es6-iterator@0.1.3",
        "pkg:npm/es6-set@0.1.1",
        "pkg:npm/es6-symbol@0.1.1",
        "pkg:npm/event-emitter@0.3.3"
      ]
    },
    {
      "ref": "pkg:npm/es6-weak-map@0.1.4",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.7",
        "pkg:npm/es6-iterator@0.1.3",
        "pkg:npm/es6-symbol@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esrecurse@3.1.1",
      "dependsOn": [
        "pkg:npm/estraverse@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/escope@3.1.0",
      "dependsOn": [
        "pkg:npm/es6-map@0.1.1",
        "pkg:npm/es6-weak-map@0.1.4",
        "pkg:npm/esrecurse@3.1.1",
        "pkg:npm/estraverse@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/espree@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse-fb@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globals@6.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cli-width@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/figures@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@3.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readline2@0.1.1",
      "dependsOn": [
        "pkg:npm/mute-stream@0.0.4",
        "pkg:npm/strip-ansi@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rx@2.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through@2.3.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inquirer@0.8.5",
      "dependsOn": [
        "pkg:npm/ansi-regex@1.1.1",
        "pkg:npm/chalk@1.0.0",
        "pkg:npm/cli-width@1.0.1",
        "pkg:npm/figures@1.3.5",
        "pkg:npm/lodash@3.9.3",
        "pkg:npm/readline2@0.1.1",
        "pkg:npm/rx@2.5.2",
        "pkg:npm/through@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.2",
      "dependsOn": [
        "pkg:npm/lodash@3.9.3",
        "pkg:npm/sprintf-js@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/esprima@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.3.1",
      "dependsOn": [
        "pkg:npm/argparse@1.0.2",
        "pkg:npm/esprima@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.0",
      "dependsOn": [
        "pkg:npm/balanced-match@0.2.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@2.0.8",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prelude-ls@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-check@0.3.1",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/levn@0.2.5",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.2",
        "pkg:npm/type-check@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optionator@0.5.0",
      "dependsOn": [
        "pkg:npm/deep-is@0.1.3",
        "pkg:npm/fast-levenshtein@1.0.6",
        "pkg:npm/levn@0.2.5",
        "pkg:npm/prelude-ls@1.1.2",
        "pkg:npm/type-check@0.3.1",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/text-table@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/user-home@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml-escape@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint@0.21.2",
      "dependsOn": [
        "pkg:npm/chalk@1.0.0",
        "pkg:npm/concat-stream@1.4.8",
        "pkg:npm/debug@2.2.0",
        "pkg:npm/doctrine@0.6.4",
        "pkg:npm/escape-string-regexp@1.0.3",
        "pkg:npm/escope@3.1.0",
        "pkg:npm/espree@2.0.2",
        "pkg:npm/estraverse-fb@1.3.1",
        "pkg:npm/estraverse@2.0.0",
        "pkg:npm/globals@6.4.1",
        "pkg:npm/inquirer@0.8.5",
        "pkg:npm/js-yaml@3.3.1",
        "pkg:npm/minimatch@2.0.8",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/object-assign@2.0.0",
        "pkg:npm/optionator@0.5.0",
        "pkg:npm/path-is-absolute@1.0.0",
        "pkg:npm/strip-json-comments@1.0.2",
        "pkg:npm/text-table@0.2.0",
        "pkg:npm/user-home@1.1.1",
        "pkg:npm/xml-escape@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-config-standard@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-plugin-react@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-root@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.3.2",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.4",
      "dependsOn": [
        "pkg:npm/once@1.3.2",
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@5.0.10",
      "dependsOn": [
        "pkg:npm/inflight@1.0.4",
        "pkg:npm/inherits@2.0.0",
        "pkg:npm/minimatch@2.0.8",
        "pkg:npm/once@1.3.2",
        "pkg:npm/path-is-absolute@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ignore@2.2.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/run-parallel@1.1.1",
      "dependsOn": [
        "pkg:npm/dezalgo@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/debug@0.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mout@0.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-relative@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-absolute@0.1.7",
      "dependsOn": [
        "pkg:npm/is-relative@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/which@1.1.1",
      "dependsOn": [
        "pkg:npm/is-absolute@0.1.7"
      ]
    },
    {
      "ref": "pkg:npm/npm-path@1.0.1",
      "dependsOn": [
        "pkg:npm/which@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/protochain@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serializerr@1.0.1",
      "dependsOn": [
        "pkg:npm/protochain@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/sync-exec@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run@1.1.1",
      "dependsOn": [
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/npm-path@1.0.1",
        "pkg:npm/serializerr@1.0.1",
        "pkg:npm/sync-exec@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/resolve@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rocambole@0.6.0",
      "dependsOn": [
        "pkg:npm/esprima@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/rocambole-token@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rocambole-indent@2.0.4",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/mout@0.11.0",
        "pkg:npm/rocambole-token@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/semver@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rocambole-linebreak@1.0.1",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/rocambole-token@1.2.1",
        "pkg:npm/semver@4.3.6"
      ]
    },
    {
      "ref": "pkg:npm/rocambole-node@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-string@1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rocambole-whitespace@1.0.0",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/repeat-string@1.5.2",
        "pkg:npm/rocambole-token@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/semver@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stdin@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esformatter@0.6.1",
      "dependsOn": [
        "pkg:npm/debug@0.7.4",
        "pkg:npm/mout@0.11.0",
        "pkg:npm/npm-run@1.1.1",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/resolve@1.1.6",
        "pkg:npm/rocambole-indent@2.0.4",
        "pkg:npm/rocambole-linebreak@1.0.1",
        "pkg:npm/rocambole-node@1.0.0",
        "pkg:npm/rocambole-token@1.2.1",
        "pkg:npm/rocambole-whitespace@1.0.0",
        "pkg:npm/rocambole@0.6.0",
        "pkg:npm/semver@2.2.1",
        "pkg:npm/stdin@0.0.1",
        "pkg:npm/strip-json-comments@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/string.prototype.endswith@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esformatter-eol-last@1.0.0",
      "dependsOn": [
        "pkg:npm/string.prototype.endswith@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/esprima@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rocambole@0.3.6",
      "dependsOn": [
        "pkg:npm/esprima@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/esformatter-literal-notation@1.0.0",
      "dependsOn": [
        "pkg:npm/rocambole-token@1.2.1",
        "pkg:npm/rocambole@0.3.6"
      ]
    },
    {
      "ref": "pkg:npm/esformatter-quotes@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esformatter-spaced-lined-comment@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@4.5.3",
      "dependsOn": [
        "pkg:npm/inflight@1.0.4",
        "pkg:npm/inherits@2.0.0",
        "pkg:npm/minimatch@2.0.8",
        "pkg:npm/once@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/standard-format@1.3.6",
      "dependsOn": [
        "pkg:npm/esformatter-eol-last@1.0.0",
        "pkg:npm/esformatter-literal-notation@1.0.0",
        "pkg:npm/esformatter-quotes@1.0.1",
        "pkg:npm/esformatter-spaced-lined-comment@2.0.1",
        "pkg:npm/esformatter@0.6.1",
        "pkg:npm/find-root@0.1.1",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/minimatch@2.0.8",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/stdin@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/uniq@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/standard@4.0.0",
      "dependsOn": [
        "pkg:npm/dezalgo@1.0.2",
        "pkg:npm/eslint-config-standard@2.0.0",
        "pkg:npm/eslint-plugin-react@2.4.0",
        "pkg:npm/eslint@0.21.2",
        "pkg:npm/find-root@0.1.1",
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/glob@5.0.10",
        "pkg:npm/ignore@2.2.15",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/run-parallel@1.1.1",
        "pkg:npm/standard-format@1.3.6",
        "pkg:npm/uniq@1.0.1",
        "pkg:npm/xtend@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/buffer-equal@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore.string@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@0.1.16",
      "dependsOn": [
        "pkg:npm/underscore.string@2.4.0",
        "pkg:npm/underscore@1.7.0"
      ]
    },
    {
      "ref": "pkg:npm/js-yaml@3.0.1",
      "dependsOn": [
        "pkg:npm/argparse@0.1.16",
        "pkg:npm/esprima@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/lcov-parse@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log-driver@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-uuid@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@0.0.7",
      "dependsOn": [
        "pkg:npm/delayed-stream@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@0.1.4",
      "dependsOn": [
        "pkg:npm/async@0.9.2",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/hoek@0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@0.4.2",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@0.2.2",
      "dependsOn": [
        "pkg:npm/boom@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/sntp@0.2.4",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/hawk@1.1.1",
      "dependsOn": [
        "pkg:npm/boom@0.4.2",
        "pkg:npm/cryptiles@0.2.2",
        "pkg:npm/hoek@0.9.1",
        "pkg:npm/sntp@0.2.4"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-plus@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ctype@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-signature@0.10.1",
      "dependsOn": [
        "pkg:npm/asn1@0.1.11",
        "pkg:npm/assert-plus@0.1.5",
        "pkg:npm/ctype@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/oauth-sign@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringstream@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.40.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.1.4",
        "pkg:npm/hawk@1.1.1",
        "pkg:npm/http-signature@0.10.1",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@1.0.2",
        "pkg:npm/node-uuid@1.4.3",
        "pkg:npm/oauth-sign@0.3.0",
        "pkg:npm/qs@1.0.2",
        "pkg:npm/stringstream@0.0.4",
        "pkg:npm/tough-cookie@1.2.0",
        "pkg:npm/tunnel-agent@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/coveralls@2.11.2",
      "dependsOn": [
        "pkg:npm/js-yaml@3.0.1",
        "pkg:npm/lcov-parse@0.0.6",
        "pkg:npm/log-driver@1.2.4",
        "pkg:npm/request@2.40.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/foreground-child@1.2.0",
      "dependsOn": [
        "pkg:npm/signal-exit@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/abbrev@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@1.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/escodegen@1.6.1",
      "dependsOn": [
        "pkg:npm/esprima@1.2.5",
        "pkg:npm/estraverse@1.9.3",
        "pkg:npm/esutils@1.1.6",
        "pkg:npm/optionator@0.5.0",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/esprima@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.6.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.3.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.6.4",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.2.11",
      "dependsOn": [
        "pkg:npm/inherits@2.0.0",
        "pkg:npm/minimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@0.4.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.6.4",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fileset@0.1.5",
      "dependsOn": [
        "pkg:npm/glob@3.2.11",
        "pkg:npm/minimatch@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.3.7",
      "dependsOn": [
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.3.6",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/handlebars@3.0.0",
      "dependsOn": [
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/source-map@0.1.43",
        "pkg:npm/uglify-js@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/nopt@3.0.2",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.7"
      ]
    },
    {
      "ref": "pkg:npm/which@1.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul@0.3.14",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.7",
        "pkg:npm/async@0.9.2",
        "pkg:npm/escodegen@1.6.1",
        "pkg:npm/esprima@2.1.0",
        "pkg:npm/fileset@0.1.5",
        "pkg:npm/handlebars@3.0.0",
        "pkg:npm/js-yaml@3.3.1",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/nopt@3.0.2",
        "pkg:npm/once@1.3.2",
        "pkg:npm/resolve@1.1.6",
        "pkg:npm/supports-color@1.3.1",
        "pkg:npm/which@1.0.9",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.3.4",
      "dependsOn": [
        "pkg:npm/glob@4.5.3"
      ]
    },
    {
      "ref": "pkg:npm/spawn-wrap@1.0.1",
      "dependsOn": [
        "pkg:npm/foreground-child@1.2.0",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/rimraf@2.3.4",
        "pkg:npm/signal-exit@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/first-chunk-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@1.0.0",
      "dependsOn": [
        "pkg:npm/first-chunk-stream@1.0.0",
        "pkg:npm/is-utf8@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/longest@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/align-text@0.1.1",
      "dependsOn": [
        "pkg:npm/kind-of@1.1.0",
        "pkg:npm/longest@1.0.1",
        "pkg:npm/repeat-string@1.5.2"
      ]
    },
    {
      "ref": "pkg:npm/center-align@0.1.1",
      "dependsOn": [
        "pkg:npm/align-text@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/right-align@0.1.1",
      "dependsOn": [
        "pkg:npm/align-text@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@2.1.0",
      "dependsOn": [
        "pkg:npm/center-align@0.1.1",
        "pkg:npm/right-align@0.1.1",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.10.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.1.0",
        "pkg:npm/cliui@2.1.0",
        "pkg:npm/decamelize@1.0.0",
        "pkg:npm/window-size@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/nyc@2.2.1",
      "dependsOn": [
        "pkg:npm/foreground-child@1.2.0",
        "pkg:npm/istanbul@0.3.14",
        "pkg:npm/lodash@3.9.3",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/rimraf@2.3.4",
        "pkg:npm/signal-exit@2.1.2",
        "pkg:npm/spawn-wrap@1.0.1",
        "pkg:npm/strip-bom@1.0.0",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/opener@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/events-to-array@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tap-parser@1.1.5",
      "dependsOn": [
        "pkg:npm/events-to-array@1.0.2",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/js-yaml@3.3.1",
        "pkg:npm/readable-stream@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/tap-mocha-reporter@0.0.13",
      "dependsOn": [
        "pkg:npm/debug@2.2.0",
        "pkg:npm/diff@1.4.0",
        "pkg:npm/escape-string-regexp@1.0.3",
        "pkg:npm/glob@5.0.10",
        "pkg:npm/js-yaml@3.3.1",
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/supports-color@1.3.1",
        "pkg:npm/tap-parser@1.1.5"
      ]
    },
    {
      "ref": "pkg:npm/tap@1.2.0",
      "dependsOn": [
        "pkg:npm/buffer-equal@0.0.1",
        "pkg:npm/coveralls@2.11.2",
        "pkg:npm/deep-equal@1.0.0",
        "pkg:npm/foreground-child@1.2.0",
        "pkg:npm/glob@5.0.10",
        "pkg:npm/js-yaml@3.3.1",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/nyc@2.2.1",
        "pkg:npm/opener@1.4.1",
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/signal-exit@2.1.2",
        "pkg:npm/supports-color@1.3.1",
        "pkg:npm/tap-mocha-reporter@0.0.13",
        "pkg:npm/tap-parser@1.1.5"
      ]
    },
    {
      "ref": "pkg:npm/fstream@1.0.12",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.15",
        "pkg:npm/inherits@2.0.0",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/rimraf@2.0.2",
        "pkg:npm/standard@4.0.0",
        "pkg:npm/tap@1.2.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/fstream@1.0.12"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-16T14:41:40Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Sunday, August 16, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'fstream' with version '1.0.12'."
    }
  ]
}