{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:3ef8eaf1-06ad-4d21-b062-82e3ff5e69a3",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-29T21:43:08Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "jasmine-core",
      "group": "",
      "version": "6.2.0",
      "description": "Simple JavaScript testing framework for browsers and node.js",
      "purl": "pkg:npm/jasmine-core@6.2.0",
      "bom-ref": "pkg:npm/jasmine-core@6.2.0",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "posttest, test, test:parallel, cleanup, build, buildStandaloneDist, serve, serve:performance, ci, ci:performance"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://jasmine.github.io"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jasmine/jasmine.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@asamuzakjp\\n@csstools\\n@eslint\\n@eslint-community\\n@humanfs\\n@humanwhocodes\\n@isaacs\\n@mdn\\n@parcel\\n@pkgjs\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@asamuzakjp/css-color/package.json\\nnode_modules/@csstools/color-helpers/package.json\\nnode_modules/@csstools/css-calc/package.json\\nnode_modules/@csstools/css-color-parser/package.json\\nnode_modules/@csstools/css-parser-algorithms/package.json\\nnode_modules/@csstools/css-tokenizer/package.json\\nnode_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json\\nnode_modules/@eslint-community/eslint-utils/package.json\\nnode_modules/@eslint-community/regexpp/package.json\\nnode_modules/@eslint/config-array/package.json\\nnode_modules/@eslint/config-helpers/package.json\\nnode_modules/@eslint/core/package.json\\nnode_modules/@eslint/eslintrc/node_modules/globals/package.json\\nnode_modules/@eslint/eslintrc/package.json\\nnode_modules/@eslint/js/package.json\\nnode_modules/@eslint/object-schema/package.json\\nnode_modules/@eslint/plugin-kit/package.json\\nnode_modules/@humanfs/core/package.json\\nnode_modules/@humanfs/node/package.json\\nnode_modules/@humanfs/types/package.json\\nnode_modules/@humanwhocodes/module-importer/package.json\\nnode_modules/@humanwhocodes/retry/package.json\\nnode_modules/@isaacs/cliui/package.json\\nnode_modules/@mdn/browser-compat-data/package.json\\nnode_modules/@parcel/watcher-linux-x64-glibc/package.json\\nnode_modules/@parcel/watcher/package.json\\nnode_modules/@pkgjs/parseargs/package.json\\nnode_modules/@types/estree/package.json\\nnode_modules/@types/json-schema/package.json\\nnode_modules/abort-controller/package.json\\nnode_modules/acorn-jsx/package.json\\nnode_modules/acorn/package.json\\nnode_modules/agent-base/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/archiver-utils/node_modules/brace-expansion/package.json\\nnode_modules/archiver-utils/node_modules/glob/package.json\\nnode_modules/archiver-utils/node_modules/minimatch/package.json\\nnode_modules/archiver-utils/node_modules/path-scurry/package.json\\nnode_modules/archiver-utils/package.json\\nnode_modules/archiver/package.json\\nnode_modules/argparse/package.json\\nnode_modules/ast-metadata-inferer/node_modules/@mdn/browser-compat-data/package.json\\nnode_modules/ast-metadata-inferer/package.json\\nnode_modules/async/package.json\\nnode_modules/b4a/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/bare-events/package.json\\nnode_modules/bare-fs/package.json\\nnode_modules/bare-os/package.json\\nnode_modules/bare-path/package.json\\nnode_modules/bare-stream/package.json\\nnode_modules/bare-url/package.json\\nnode_modules/base64-js/package.json\\nnode_modules/baseline-browser-mapping/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/browserslist/package.json\\nnode_modules/buffer-crc32/package.json\\nnode_modules/buffer/package.json\\nnode_modules/callsites/package.json\\nnode_modules/caniuse-lite/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/compress-commons/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/crc-32/package.json\\nnode_modules/crc32-stream/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/css-url-embed/package.json\\nnode_modules/cssstyle/package.json\\nnode_modules/data-urls/package.json\\nnode_modules/debug/package.json\\nnode_modules/decimal.js/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/detect-libc/package.json\\nnode_modules/eastasianwidth/package.json\\nnode_modules/ejs/package.json\\nnode_modules/electron-to-chromium/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/entities/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/eslint-plugin-compat/lib/cjs/package.json\\nnode_modules/eslint-plugin-compat/lib/esm/package.json\\nnode_modules/eslint-plugin-compat/node_modules/globals/package.json\\nnode_modules/eslint-plugin-compat/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint/package.json\\nnode_modules/espree/package.json\\nnode_modules/esquery/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/event-target-shim/package.json\\nnode_modules/events-universal/package.json\\nnode_modules/events/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-fifo/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/file-entry-cache/package.json\\nnode_modules/filelist/node_modules/brace-expansion/package.json\\nnode_modules/filelist/node_modules/minimatch/package.json\\nnode_modules/filelist/package.json\\nnode_modules/find-up/package.json\\nnode_modules/flat-cache/package.json\\nnode_modules/flatted/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/glob-parent/package.json\\nnode_modules/glob/node_modules/balanced-match/package.json\\nnode_modules/glob/node_modules/brace-expansion/package.json\\nnode_modules/glob/node_modules/minimatch/package.json\\nnode_modules/glob/package.json\\nnode_modules/globals/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/html-encoding-sniffer/package.json\\nnode_modules/http-proxy-agent/package.json\\nnode_modules/https-proxy-agent/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ieee754/package.json\\nnode_modules/ignore/package.json\\nnode_modules/immutable/package.json\\nnode_modules/import-fresh/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/inherits/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-potential-custom-element-name/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/jake/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsdom/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-stable-stringify-without-jsonify/package.json\\nnode_modules/keyv/package.json\\nnode_modules/lazystream/node_modules/readable-stream/package.json\\nnode_modules/lazystream/node_modules/safe-buffer/package.json\\nnode_modules/lazystream/node_modules/string_decoder/package.json\\nnode_modules/lazystream/package.json\\nnode_modules/levn/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.memoize/package.json\\nnode_modules/lodash.merge/package.json\\nnode_modules/lodash/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minipass/package.json\\nnode_modules/ms/package.json\\nnode_modules/natural-compare/package.json\\nnode_modules/node-addon-api/package.json\\nnode_modules/node-releases/package.json\\nnode_modules/normalize-path/package.json\\nnode_modules/nwsapi/package.json\\nnode_modules/optionator/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/parent-module/package.json\\nnode_modules/parse5/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-scurry/node_modules/lru-cache/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/prettier/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/process/package.json\\nnode_modules/punycode/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readdir-glob/node_modules/brace-expansion/package.json\\nnode_modules/readdir-glob/node_modules/minimatch/package.json\\nnode_modules/readdir-glob/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/rrweb-cssom/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/sass/package.json\\nnode_modules/saxes/package.json\\nnode_modules/semver/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/source-map-js/package.json\\nnode_modules/streamx/package.json\\nnode_modules/string-width-cjs/node_modules/ansi-regex/package.json\\nnode_modules/string-width-cjs/node_modules/emoji-regex/package.json\\nnode_modules/string-width-cjs/node_modules/strip-ansi/package.json\\nnode_modules/string-width-cjs/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/strip-ansi-cjs/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/symbol-tree/package.json\\nnode_modules/tar-stream/package.json\\nnode_modules/teex/package.json\\nnode_modules/text-decoder/package.json\\nnode_modules/tldts-core/package.json\\nnode_modules/tldts/package.json\\nnode_modules/tough-cookie/package.json\\nnode_modules/tr46/package.json\\nnode_modules/type-check/package.json\\nnode_modules/update-browserslist-db/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/w3c-xmlserializer/package.json\\nnode_modules/webidl-conversions/package.json\\nnode_modules/whatwg-encoding/package.json\\nnode_modules/whatwg-mimetype/package.json\\nnode_modules/whatwg-url/package.json\\nnode_modules/which/package.json\\nnode_modules/word-wrap/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/string-width/package.json\\nnode_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json\\nnode_modules/wrap-ansi-cjs/package.json\\nnode_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/ws/package.json\\nnode_modules/xml-name-validator/package.json\\nnode_modules/xmlchars/package.json\\nnode_modules/yocto-queue/package.json\\nnode_modules/zip-stream/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "zip-stream",
      "version": "6.0.1",
      "description": "a streaming zip archive generator.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/zip-stream@6.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-zip-stream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-zip-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zip-stream@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/zip-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/zip-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/zip-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "description": "Tiny queue data structure",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yocto-queue/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yocto-queue/package.json"
              }
            ],
            "concludedValue": "node_modules/yocto-queue/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Louis-Dominique Dubeau <ldd@lddubeau.com>"
        }
      ],
      "group": "",
      "name": "xmlchars",
      "version": "2.2.0",
      "description": "Utilities for determining if characters belong to character classes defined by the XML specs.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/xmlchars@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/xmlchars@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xmlchars/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xmlchars/package.json"
              }
            ],
            "concludedValue": "node_modules/xmlchars/package.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "xml-name-validator",
      "version": "5.0.0",
      "description": "Validates whether a string matches the production for an XML name or qualified name",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/xml-name-validator@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/xml-name-validator@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xml-name-validator/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xml-name-validator/package.json"
              }
            ],
            "concludedValue": "node_modules/xml-name-validator/package.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)"
        }
      ],
      "group": "",
      "name": "ws",
      "version": "8.20.0",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ws@8.20.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/websockets/ws"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/websockets/ws.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ws/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ws/package.json"
              }
            ],
            "concludedValue": "node_modules/ws/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrap-ansi-cjs/package.json"
              }
            ],
            "concludedValue": "node_modules/wrap-ansi-cjs/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi-cjs/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/string-width-cjs/node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string-width-cjs/package.json"
              }
            ],
            "concludedValue": "node_modules/string-width-cjs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/emoji-regex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/emoji-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/emoji-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/string-width-cjs/node_modules/emoji-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi-cjs/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/string-width-cjs/node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrap-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/wrap-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "6.2.3",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@6.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@6.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "word-wrap",
      "version": "1.2.5",
      "description": "Wrap words to a specified length.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/word-wrap"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/word-wrap/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/word-wrap/package.json"
              }
            ],
            "concludedValue": "node_modules/word-wrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-which.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which/package.json"
              }
            ],
            "concludedValue": "node_modules/which/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian Mayr <github@smayr.name>"
        }
      ],
      "group": "",
      "name": "whatwg-url",
      "version": "14.2.0",
      "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/whatwg-url@14.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@14.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/whatwg-url/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/whatwg-url/package.json"
              }
            ],
            "concludedValue": "node_modules/whatwg-url/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "whatwg-mimetype",
      "version": "4.0.0",
      "description": "Parses, serializes, and manipulates MIME types, according to the WHATWG MIME Sniffing Standard",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/whatwg-mimetype@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-mimetype@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/whatwg-mimetype/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/whatwg-mimetype/package.json"
              }
            ],
            "concludedValue": "node_modules/whatwg-mimetype/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "whatwg-encoding",
      "version": "3.1.1",
      "description": "Decode strings according to the WHATWG Encoding Standard",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/whatwg-encoding@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-encoding@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/whatwg-encoding/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/whatwg-encoding/package.json"
              }
            ],
            "concludedValue": "node_modules/whatwg-encoding/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "webidl-conversions",
      "version": "7.0.0",
      "description": "Implements the WebIDL algorithms for converting to and from JavaScript values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/webidl-conversions@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webidl-conversions/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webidl-conversions/package.json"
              }
            ],
            "concludedValue": "node_modules/webidl-conversions/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "w3c-xmlserializer",
      "version": "5.0.0",
      "description": "A per-spec XML serializer implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/w3c-xmlserializer@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/w3c-xmlserializer@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/w3c-xmlserializer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/w3c-xmlserializer/package.json"
              }
            ],
            "concludedValue": "node_modules/w3c-xmlserializer/package.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/util-deprecate"
        },
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/util-deprecate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util-deprecate/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/util-deprecate/package.json"
              }
            ],
            "concludedValue": "node_modules/util-deprecate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gary Court <gary.court@gmail.com>"
        }
      ],
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/garycourt/uri-js"
        },
        {
          "type": "vcs",
          "url": "http://github.com/garycourt/uri-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uri-js/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uri-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uri-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Sitnik <andrey@sitnik.ru>"
        }
      ],
      "group": "",
      "name": "update-browserslist-db",
      "version": "1.2.3",
      "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/update-browserslist-db@1.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/update-browserslist-db@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/update-browserslist-db/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/update-browserslist-db/package.json"
              }
            ],
            "concludedValue": "node_modules/update-browserslist-db/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "type-check",
      "version": "0.4.0",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/type-check"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/type-check.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/type-check/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/type-check/package.json"
              }
            ],
            "concludedValue": "node_modules/type-check/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian Mayr <npm@smayr.name>"
        }
      ],
      "group": "",
      "name": "tr46",
      "version": "5.1.1",
      "description": "An implementation of the Unicode UTS #46: Unicode IDNA Compatibility Processing",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tr46@5.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/tr46@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tr46/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tr46/package.json"
              }
            ],
            "concludedValue": "node_modules/tr46/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jeremy Stashewsky <jstash@gmail.com>"
        }
      ],
      "group": "",
      "name": "tough-cookie",
      "version": "5.1.2",
      "description": "RFC6265 Cookies and Cookie Jar for node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/tough-cookie@5.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/salesforce/tough-cookie"
        },
        {
          "type": "vcs",
          "url": "git://github.com/salesforce/tough-cookie.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tough-cookie/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tough-cookie/package.json"
              }
            ],
            "concludedValue": "node_modules/tough-cookie/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rémi Berson"
        }
      ],
      "group": "",
      "name": "tldts-core",
      "version": "6.1.86",
      "description": "tldts core primitives (internal module)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tldts-core@6.1.86",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/remusao/tldts#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/remusao/tldts.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tldts-core@6.1.86",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tldts-core/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tldts-core/package.json"
              }
            ],
            "concludedValue": "node_modules/tldts-core/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rémi Berson"
        }
      ],
      "group": "",
      "name": "tldts",
      "version": "6.1.86",
      "description": "Library to work against complex domain names, subdomains and URIs.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tldts@6.1.86",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/remusao/tldts#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/remusao/tldts.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tldts@6.1.86",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tldts/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tldts/package.json"
              }
            ],
            "concludedValue": "node_modules/tldts/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "text-decoder",
      "version": "1.2.7",
      "description": "Streaming text decoder that preserves multibyte Unicode characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/text-decoder@1.2.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/text-decoder#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/text-decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-decoder@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/text-decoder/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/text-decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/text-decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "teex",
      "version": "1.0.1",
      "description": "Turn a readable stream into multiple readable streamx streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/teex@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/teex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/teex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/teex@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/teex/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/teex/package.json"
              }
            ],
            "concludedValue": "node_modules/teex/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "tar-stream",
      "version": "3.2.0",
      "description": "tar-stream is a streaming tar parser and generator and nothing else. It operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/tar-stream@3.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/tar-stream"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mafintosh/tar-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tar-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tar-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/tar-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joris van der Wel <joris@jorisvanderwel.com>"
        }
      ],
      "group": "",
      "name": "symbol-tree",
      "version": "3.2.4",
      "description": "Turn any collection of objects into its own efficient tree or linked list using Symbol",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/symbol-tree@3.2.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jsdom/js-symbol-tree#symbol-tree"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jsdom/js-symbol-tree.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/symbol-tree@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/symbol-tree/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/symbol-tree/package.json"
              }
            ],
            "concludedValue": "node_modules/symbol-tree/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supports-color/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-json-comments/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-json-comments/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-json-comments/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "7.2.0",
      "description": "Strip ANSI escape codes from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string_decoder/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "5.1.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string-width@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string-width/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "streamx",
      "version": "2.25.0",
      "description": "An iteration of the Node.js core streams with a series of improvements",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/streamx@2.25.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/streamx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/streamx.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamx@2.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/streamx/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/streamx/package.json"
              }
            ],
            "concludedValue": "node_modules/streamx/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Valentin 7rulnik Semirulnik <v7rulnik@gmail.com>"
        }
      ],
      "group": "",
      "name": "source-map-js",
      "version": "1.2.1",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/source-map-js@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/7rulnik/source-map-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-js@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map-js/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map-js/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "signal-exit",
      "version": "4.1.0",
      "description": "when you want to fire an event no matter how a process exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/signal-exit/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/signal-exit/package.json"
              }
            ],
            "concludedValue": "node_modules/signal-exit/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching a shebang line",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-regex/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "description": "Get the command from a shebang",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-command/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-command/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-command/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "7.7.4",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/semver@7.7.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/semver/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Louis-Dominique Dubeau <ldd@lddubeau.com>"
        }
      ],
      "group": "",
      "name": "saxes",
      "version": "6.0.0",
      "description": "An evented streaming XML parser in JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/saxes@6.0.0",
      "type": "framework",
      "bom-ref": "pkg:npm/saxes@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/saxes/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/saxes/package.json"
              }
            ],
            "concludedValue": "node_modules/saxes/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Natalie Weizenbaum <nweiz@google.com> (https://github.com/nex3)"
        }
      ],
      "group": "",
      "name": "sass",
      "version": "1.99.0",
      "description": "A pure JavaScript implementation of Sass.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/sass@1.99.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sass/dart-sass"
        },
        {
          "type": "vcs",
          "url": "https://github.com/sass/dart-sass"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sass@1.99.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sass/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "sass"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sass/package.json"
              }
            ],
            "concludedValue": "node_modules/sass/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/lib/buildDistribution.js#2"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)"
        }
      ],
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/ChALkeR/safer-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safer-buffer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safer-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safer-buffer/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-buffer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nikita Vasilyev <me@elv1s.ru>"
        }
      ],
      "group": "",
      "name": "rrweb-cssom",
      "version": "0.8.0",
      "description": "CSS Object Model implementation and CSS parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/rrweb-cssom@0.8.0",
      "type": "library",
      "bom-ref": "pkg:npm/rrweb-cssom@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/rrweb-cssom/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rrweb-cssom/package.json"
              }
            ],
            "concludedValue": "node_modules/rrweb-cssom/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "resolve-from",
      "version": "4.0.0",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve-from/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve-from/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve-from/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (thlorenz.com)"
        }
      ],
      "group": "",
      "name": "readdirp",
      "version": "4.1.2",
      "description": "Recursive version of fs.readdir with small RAM & CPU footprint.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/readdirp@4.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/readdirp"
        },
        {
          "type": "vcs",
          "url": "git://github.com/paulmillr/readdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readdirp/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/readdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Yann Armelin"
        }
      ],
      "group": "",
      "name": "readdir-glob",
      "version": "1.1.3",
      "description": "Recursive fs.readdir with streaming API and glob filtering.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/readdir-glob@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Yqnn/node-readdir-glob"
        },
        {
          "type": "vcs",
          "url": "git://github.com/Yqnn/node-readdir-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdir-glob@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readdir-glob/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readdir-glob/package.json"
              }
            ],
            "concludedValue": "node_modules/readdir-glob/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "5.1.9",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@5.1.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@5.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readdir-glob/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/filelist/node_modules/minimatch/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/filelist/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/filelist/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "2.1.0",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readdir-glob/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/filelist/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/archiver-utils/node_modules/brace-expansion/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver-utils/node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver-utils/node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "4.7.0",
      "description": "Node.js Streams, a user-land copy of the stream library from Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@4.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/readable-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@4.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "2.3.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/punycode/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "description": "process.nextTick but always with args",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args"
        },
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process-nextick-args/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process-nextick-args/package.json"
              }
            ],
            "concludedValue": "node_modules/process-nextick-args/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roman Shtylman <shtylman@gmail.com>"
        }
      ],
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "description": "process information for node.js and browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/shtylman/node-process.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process/package.json"
              }
            ],
            "concludedValue": "node_modules/process/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Long"
        }
      ],
      "group": "",
      "name": "prettier",
      "version": "1.17.1",
      "description": "Prettier is an opinionated code formatter",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/prettier@1.17.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://prettier.io"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@1.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/prettier/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/prettier/package.json"
              }
            ],
            "concludedValue": "node_modules/prettier/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "prelude-ls",
      "version": "1.2.1",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.2.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://preludels.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/prelude-ls.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/prelude-ls/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/prelude-ls/package.json"
              }
            ],
            "concludedValue": "node_modules/prelude-ls/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "picomatch",
      "version": "4.0.4",
      "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/picomatch"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/picomatch/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/picomatch/package.json"
              }
            ],
            "concludedValue": "node_modules/picomatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexey Raspopov"
        }
      ],
      "group": "",
      "name": "picocolors",
      "version": "1.1.1",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/picocolors/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/picocolors/package.json"
              }
            ],
            "concludedValue": "node_modules/picocolors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "path-scurry",
      "version": "2.0.2",
      "description": "walk paths fast and efficiently",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/path-scurry@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/path-scurry"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-scurry/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-scurry/package.json"
              }
            ],
            "concludedValue": "node_modules/path-scurry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "11.3.6",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@11.3.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/isaacs/node-lru-cache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@11.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-scurry/node_modules/lru-cache/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-scurry/node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/path-scurry/node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "description": "Get the PATH environment variable key cross-platform",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-key/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-key/package.json"
              }
            ],
            "concludedValue": "node_modules/path-key/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "description": "Check if a path exists",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-exists/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-exists/package.json"
              }
            ],
            "concludedValue": "node_modules/path-exists/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ivan Nikulin <ifaaan@gmail.com> (https://github.com/inikulin)"
        }
      ],
      "group": "",
      "name": "parse5",
      "version": "7.3.0",
      "description": "HTML parser and serializer.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/parse5@7.3.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://parse5.js.org"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inikulin/parse5.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse5@7.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse5/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse5/package.json"
              }
            ],
            "concludedValue": "node_modules/parse5/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "parent-module",
      "version": "1.0.1",
      "description": "Get the path of the parent module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/parent-module@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/parent-module@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parent-module/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parent-module/package.json"
              }
            ],
            "concludedValue": "node_modules/parent-module/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "description": "Load the local package.json from either src or dist folder",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/package-json-from-dist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/package-json-from-dist/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/package-json-from-dist/package.json"
              }
            ],
            "concludedValue": "node_modules/package-json-from-dist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-locate/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-locate/package.json"
              }
            ],
            "concludedValue": "node_modules/p-locate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-limit/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/p-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "optionator",
      "version": "0.9.4",
      "description": "option parsing and help generation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.9.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/optionator"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/optionator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optionator/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optionator/package.json"
              }
            ],
            "concludedValue": "node_modules/optionator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Diego Perini <diego.perini@gmail.com>"
        }
      ],
      "group": "",
      "name": "nwsapi",
      "version": "2.2.23",
      "description": "Fast CSS Selectors API Engine",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/nwsapi@2.2.23",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://javascript.nwbox.com/nwsapi/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dperini/nwsapi.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nwsapi@2.2.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nwsapi/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nwsapi/package.json"
              }
            ],
            "concludedValue": "node_modules/nwsapi/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "description": "Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/normalize-path"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-path/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/normalize-path/package.json"
              }
            ],
            "concludedValue": "node_modules/normalize-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sergey Rubanov <chi187@gmail.com>"
        }
      ],
      "group": "",
      "name": "node-releases",
      "version": "2.0.38",
      "description": "Node.js releases data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.38",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/chicoxyzzy/node-releases.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@2.0.38",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-releases/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-releases/package.json"
              }
            ],
            "concludedValue": "node_modules/node-releases/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-addon-api",
      "version": "7.1.1",
      "description": "Node.js API (Node-API)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/node-addon-api@7.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/node-addon-api"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/node-addon-api.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-addon-api@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-addon-api/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-addon-api/package.json"
              }
            ],
            "concludedValue": "node_modules/node-addon-api/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Lauri Rooden (https://github.com/litejs/natural-compare-lite)"
        }
      ],
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/natural-compare/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/natural-compare/package.json"
              }
            ],
            "concludedValue": "node_modules/natural-compare/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ms/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "minipass",
      "version": "7.1.3",
      "description": "minimal implementation of a PassThrough stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/minipass@7.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/minipass@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "3.1.5",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimatch/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "10.4.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@10.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-lru-cache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@10.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lru-cache/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash.merge",
      "version": "4.6.2",
      "description": "The Lodash method `_.merge` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lodash.merge@4.6.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.merge@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.merge/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.merge/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.merge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.memoize",
      "version": "4.1.2",
      "description": "The lodash method `_.memoize` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lodash.memoize@4.1.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.memoize@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.memoize/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.memoize/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.memoize/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash",
      "version": "4.18.1",
      "description": "Lodash modular utilities.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.18.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "description": "Get the first path that exists on disk of multiple paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/locate-path/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/locate-path/package.json"
              }
            ],
            "concludedValue": "node_modules/locate-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "levn",
      "version": "0.4.1",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/levn@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/levn"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/levn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/levn/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/levn/package.json"
              }
            ],
            "concludedValue": "node_modules/levn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonas Pommerening <jonas.pommerening@gmail.com> (https://npmjs.org/~jpommerening)"
        }
      ],
      "group": "",
      "name": "lazystream",
      "version": "1.0.1",
      "description": "Open Node Streams on demand.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lazystream@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jpommerening/node-lazystream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jpommerening/node-lazystream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazystream@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lazystream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lazystream/package.json"
              }
            ],
            "concludedValue": "node_modules/lazystream/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lazystream/node_modules/string_decoder/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lazystream/node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/lazystream/node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lazystream/node_modules/safe-buffer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lazystream/node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/lazystream/node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.8",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lazystream/node_modules/readable-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lazystream/node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/lazystream/node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Jared Wray <me@jaredwray.com> (http://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "keyv",
      "version": "4.5.4",
      "description": "Simple key-value storage with support for multiple backends",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/keyv@4.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaredwray/keyv"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jaredwray/keyv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keyv@4.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/keyv/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/keyv/package.json"
              }
            ],
            "concludedValue": "node_modules/keyv/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "json-stable-stringify-without-jsonify",
      "version": "1.0.1",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/samn/json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/samn/json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stable-stringify-without-jsonify/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-schema-traverse/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-schema-traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/json-schema-traverse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "json-buffer",
      "version": "3.0.1",
      "description": "JSON parse & stringify that supports binary via bops & base64",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-buffer@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/json-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/json-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-buffer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-buffer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/json-buffer/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "parse"
      ]
    },
    {
      "group": "",
      "name": "jsdom",
      "version": "26.1.0",
      "description": "A JavaScript implementation of many web standards",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/jsdom@26.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jsdom/jsdom.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdom@26.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsdom/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "jsdom"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsdom/package.json"
              }
            ],
            "concludedValue": "node_modules/jsdom/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "spec/helpers/domHelpers.js#7"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Vladimir Zapparov <dervus.grim@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-yaml",
      "version": "4.1.1",
      "description": "YAML 1.2 parser and serializer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-yaml/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/js-yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)"
        }
      ],
      "group": "",
      "name": "jake",
      "version": "10.9.4",
      "description": "JavaScript build tool, similar to Make or Rake",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/jake@10.9.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/jakejs/jake.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jake@10.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jake/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jake/package.json"
              }
            ],
            "concludedValue": "node_modules/jake/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "jackspeak",
      "version": "3.4.3",
      "description": "A very strict and proper argument parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/jackspeak.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jackspeak@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jackspeak/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jackspeak/package.json"
              }
            ],
            "concludedValue": "node_modules/jackspeak/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/isexe#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/isexe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isexe/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isexe/package.json"
              }
            ],
            "concludedValue": "node_modules/isexe/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isarray/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-stream",
      "version": "2.0.1",
      "description": "Check if something is a Node.js stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-stream@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/is-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "is-potential-custom-element-name",
      "version": "1.0.1",
      "description": "Check whether a given string matches the `PotentialCustomElementName` production as defined in the HTML Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-potential-custom-element-name@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/is-potential-custom-element-name"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/is-potential-custom-element-name.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-potential-custom-element-name@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-potential-custom-element-name/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-potential-custom-element-name/package.json"
              }
            ],
            "concludedValue": "node_modules/is-potential-custom-element-name/package.json"
          }
        ]
      },
      "tags": [
        "html"
      ]
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-glob",
      "version": "4.0.3",
      "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/is-glob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-glob/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-glob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-fullwidth-code-point/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-fullwidth-code-point/package.json"
              }
            ],
            "concludedValue": "node_modules/is-fullwidth-code-point/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "description": "Returns true if a string has an extglob.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-extglob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-extglob/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-extglob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-extglob/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inherits/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)"
        }
      ],
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "description": "An incremental implementation of MurmurHash3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jensyt/imurmurhash-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jensyt/imurmurhash-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/imurmurhash/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/imurmurhash/package.json"
              }
            ],
            "concludedValue": "node_modules/imurmurhash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "import-fresh",
      "version": "3.3.1",
      "description": "Import a module while bypassing the cache",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/import-fresh@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/import-fresh@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/import-fresh/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/import-fresh/package.json"
              }
            ],
            "concludedValue": "node_modules/import-fresh/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lee Byron (https://github.com/leebyron)"
        }
      ],
      "group": "",
      "name": "immutable",
      "version": "5.1.5",
      "description": "Immutable Data Collections",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/immutable@5.1.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://immutable-js.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/immutable-js/immutable-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/immutable@5.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/immutable/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/immutable/package.json"
              }
            ],
            "concludedValue": "node_modules/immutable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "kael"
        }
      ],
      "group": "",
      "name": "ignore",
      "version": "5.3.2",
      "description": "Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ignore@5.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/ignore@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ignore/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ignore/package.json"
              }
            ],
            "concludedValue": "node_modules/ignore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/feross/ieee754.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ieee754/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ieee754/package.json"
              }
            ],
            "concludedValue": "node_modules/ieee754/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexander Shtuchkin <ashtuchkin@gmail.com>"
        }
      ],
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "description": "Convert character encodings in pure javascript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ashtuchkin/iconv-lite"
        },
        {
          "type": "vcs",
          "url": "git://github.com/ashtuchkin/iconv-lite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/iconv-lite/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/iconv-lite/package.json"
              }
            ],
            "concludedValue": "node_modules/iconv-lite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "https-proxy-agent",
      "version": "7.0.6",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@7.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/proxy-agents.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/https-proxy-agent/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/https-proxy-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/https-proxy-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "http-proxy-agent",
      "version": "7.0.2",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/http-proxy-agent@7.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/proxy-agents.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-agent@7.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-proxy-agent/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-proxy-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/http-proxy-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "html-encoding-sniffer",
      "version": "4.0.0",
      "description": "Sniff the encoding from a HTML byte stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/html-encoding-sniffer@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/html-encoding-sniffer@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/html-encoding-sniffer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/html-encoding-sniffer/package.json"
              }
            ],
            "concludedValue": "node_modules/html-encoding-sniffer/package.json"
          }
        ]
      },
      "tags": [
        "html"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "description": "Check if argv has a specific flag",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-flag/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-flag/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-graceful-fs"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/graceful-fs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/graceful-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/graceful-fs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "16.5.0",
      "description": "Global identifiers from different JavaScript environments",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/globals@16.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@16.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globals/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "globals"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/globals/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs#2"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gulp Team <team@gulpjs.com> (https://gulpjs.com/)"
        }
      ],
      "group": "",
      "name": "glob-parent",
      "version": "6.0.2",
      "description": "Extract the non-magic parent path from a glob string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@6.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob-parent/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob-parent/package.json"
              }
            ],
            "concludedValue": "node_modules/glob-parent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "13.0.6",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/glob@13.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/glob@13.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/buildStandaloneDist.js#4"
          },
          {
            "location": "scripts/lib/buildDistribution.js#3"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "10.2.5",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@10.2.5",
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@10.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/node_modules/minimatch/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "5.0.5",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@5.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@5.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/node_modules/brace-expansion/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "4.0.4",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@4.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/node_modules/balanced-match/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "foreground-child",
      "version": "3.3.1",
      "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/foreground-child@3.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/foreground-child.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/foreground-child/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/foreground-child/package.json"
              }
            ],
            "concludedValue": "node_modules/foreground-child/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrea Giammarchi"
        }
      ],
      "group": "",
      "name": "flatted",
      "version": "3.4.2",
      "description": "A super light and fast circular JSON parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/flatted@3.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/WebReflection/flatted#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/WebReflection/flatted.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@3.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flatted/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flatted/package.json"
              }
            ],
            "concludedValue": "node_modules/flatted/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Jared Wray (https://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "flat-cache",
      "version": "4.0.1",
      "description": "A stupidly simple key/value storage using files to persist some data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flat-cache/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flat-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/flat-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "description": "Find a file or directory by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-up/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)"
        }
      ],
      "group": "",
      "name": "filelist",
      "version": "1.0.6",
      "description": "Lazy-evaluating list of files, based on globs or regex patterns",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/filelist@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mde/filelist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mde/filelist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filelist@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/filelist/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/filelist/package.json"
              }
            ],
            "concludedValue": "node_modules/filelist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jared Wray (https://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "file-entry-cache",
      "version": "8.0.0",
      "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@8.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/file-entry-cache/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/file-entry-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/file-entry-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ramesh Nair <ram@hiddentao.com> (http://www.hiddentao.com/)"
        }
      ],
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "description": "Efficient implementation of Levenshtein algorithm  with locale-specific collator support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hiddentao/fast-levenshtein.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-levenshtein/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-levenshtein/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-levenshtein/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-json-stable-stringify/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-json-stable-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-json-stable-stringify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Buus (@mafintosh)"
        }
      ],
      "group": "",
      "name": "fast-fifo",
      "version": "1.3.2",
      "description": "A fast fifo implementation similar to the one powering nextTick in Node.js core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-fifo@1.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fast-fifo"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/fast-fifo.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-fifo@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-fifo/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-fifo/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-fifo/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "description": "Fast deep equal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-deep-equal#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/fast-deep-equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-deep-equal/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-deep-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-deep-equal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "events-universal",
      "version": "1.0.1",
      "description": "Universal wrapper for the Node.js events module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/events-universal@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/events-universal#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/events-universal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-universal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/events-universal/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/events-universal/package.json"
              }
            ],
            "concludedValue": "node_modules/events-universal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)"
        }
      ],
      "group": "",
      "name": "events",
      "version": "3.3.0",
      "description": "Node's event emitter for all engines.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/events@3.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/Gozala/events.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/events/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/events/package.json"
              }
            ],
            "concludedValue": "node_modules/events/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "",
      "name": "event-target-shim",
      "version": "5.0.1",
      "description": "An implementation of WHATWG EventTarget interface.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/event-target-shim@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/event-target-shim"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/event-target-shim.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-target-shim@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/event-target-shim/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/event-target-shim/package.json"
              }
            ],
            "concludedValue": "node_modules/event-target-shim/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "description": "utility box for ECMAScript language tools",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esutils"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/esutils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esutils/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esutils/package.json"
              }
            ],
            "concludedValue": "node_modules/esutils/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/estraverse@5.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/estraverse"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/estraverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/estraverse/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/estraverse/package.json"
              }
            ],
            "concludedValue": "node_modules/estraverse/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "description": "ECMAScript AST recursive visitor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esrecurse/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esrecurse/package.json"
              }
            ],
            "concludedValue": "node_modules/esrecurse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joel Feenstra <jrfeenst+esquery@gmail.com>"
        }
      ],
      "group": "",
      "name": "esquery",
      "version": "1.7.0",
      "description": "A query library for ECMAScript AST using a CSS selector like query language.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/esquery@1.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esquery/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esquery/package.json"
              }
            ],
            "concludedValue": "node_modules/esquery/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "espree",
      "version": "10.4.0",
      "description": "An Esprima-compatible JavaScript parser built on Acorn",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/espree@10.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js/blob/main/packages/espree/README.md"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@10.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/espree/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/espree/package.json"
              }
            ],
            "concludedValue": "node_modules/espree/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "4.2.1",
      "description": "Constants and utilities about visitor keys to traverse AST.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@4.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js/blob/main/packages/eslint-visitor-keys/README.md"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-visitor-keys/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-visitor-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-visitor-keys/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "8.4.0",
      "description": "ECMAScript scope analyzer for ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/eslint-scope@8.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js/blob/main/packages/eslint-scope/README.md"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@8.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Amila Welihinda"
        }
      ],
      "group": "",
      "name": "eslint-plugin-compat",
      "version": "6.2.1",
      "description": "Lint browser compatibility of API used",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-compat@6.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/amilajack/eslint-plugin-compat#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/amilajack/eslint-plugin-compat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-compat@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-compat/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-compat/lib/esm/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-compat/lib/cjs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-compat/lib/cjs/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-compat/lib/cjs/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "15.15.0",
      "description": "Global identifiers from different JavaScript environments",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/globals@15.15.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@15.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-compat/node_modules/globals/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "globals"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-compat/node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-compat/node_modules/globals/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs#2"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "eslint",
      "version": "9.39.4",
      "description": "An AST-based pattern checker for JavaScript.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eslint@9.39.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@9.39.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "eslint/config,defineConfig,eslint/config/defineConfig"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs#1"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-string-regexp/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "escalade",
      "version": "3.2.0",
      "description": "A tiny (183B to 210B) and fast utility to ascend parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/escalade@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escalade/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escalade/package.json"
              }
            ],
            "concludedValue": "node_modules/escalade/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "entities",
      "version": "6.0.1",
      "description": "Encode & decode XML and HTML entities with ease & speed",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/entities@6.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/fb55/entities.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/entities/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/entities/package.json"
              }
            ],
            "concludedValue": "node_modules/entities/package.json"
          }
        ]
      },
      "tags": [
        "decode",
        "html",
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "emoji-regex",
      "version": "9.2.2",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/emoji-regex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/emoji-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@9.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/emoji-regex/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/emoji-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/emoji-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kilian Valkhof"
        }
      ],
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.5.352",
      "description": "Provides a list of electron-to-chromium version mappings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.5.352",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/Kilian/electron-to-chromium.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.5.352",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/electron-to-chromium/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/electron-to-chromium/package.json"
              }
            ],
            "concludedValue": "node_modules/electron-to-chromium/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)"
        }
      ],
      "group": "",
      "name": "ejs",
      "version": "3.1.10",
      "description": "Embedded JavaScript templates",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/ejs@3.1.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mde/ejs"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mde/ejs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ejs@3.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ejs/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "ejs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ejs/package.json"
              }
            ],
            "concludedValue": "node_modules/ejs/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/buildStandaloneDist.js#5"
          },
          {
            "location": "scripts/lib/buildDistribution.js#4"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Masaki Komagata"
        }
      ],
      "group": "",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "description": "Get East Asian Width from a character.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eastasianwidth/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eastasianwidth/package.json"
              }
            ],
            "concludedValue": "node_modules/eastasianwidth/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lovell Fuller <npm@lovell.info>"
        }
      ],
      "group": "",
      "name": "detect-libc",
      "version": "2.1.2",
      "description": "Node.js module to detect the C standard library (libc) implementation family and version",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/detect-libc@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/lovell/detect-libc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/detect-libc/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detect-libc/package.json"
              }
            ],
            "concludedValue": "node_modules/detect-libc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "deep-is",
      "version": "0.1.4",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/thlorenz/deep-is.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deep-is/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deep-is/package.json"
              }
            ],
            "concludedValue": "node_modules/deep-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Michael Mclaughlin <M8ch88l@gmail.com>"
        }
      ],
      "group": "",
      "name": "decimal.js",
      "version": "10.6.0",
      "description": "An arbitrary-precision Decimal type for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/decimal.js@10.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/MikeMcl/decimal.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decimal.js@10.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/decimal.js/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decimal.js/package.json"
              }
            ],
            "concludedValue": "node_modules/decimal.js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Junon (https://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/debug-js/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "data-urls",
      "version": "5.0.0",
      "description": "Parses data: URLs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/data-urls@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/data-urls@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/data-urls/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/data-urls/package.json"
              }
            ],
            "concludedValue": "node_modules/data-urls/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssstyle",
      "version": "4.6.0",
      "description": "CSSStyleDeclaration Object Model implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cssstyle@4.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jsdom/cssstyle"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssstyle@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cssstyle/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cssstyle/package.json"
              }
            ],
            "concludedValue": "node_modules/cssstyle/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-url-embed",
      "version": "0.1.0",
      "description": "Embed URLs as base64 strings inside your stylesheets",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/css-url-embed@0.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sgravrock/css-url-embed"
        },
        {
          "type": "vcs",
          "url": "https://github.com/sgravrock/css-url-embed"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-url-embed@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/css-url-embed/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "css-url-embed"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/css-url-embed/package.json"
              }
            ],
            "concludedValue": "node_modules/css-url-embed/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/lib/buildDistribution.js#5"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "André Cruz <andre@moxy.studio>"
        }
      ],
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/moxystudio/node-cross-spawn"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cross-spawn/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cross-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/cross-spawn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "crc32-stream",
      "version": "6.0.0",
      "description": "a streaming CRC32 checksumer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/crc32-stream@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-crc32-stream"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-crc32-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc32-stream@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/crc32-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/crc32-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/crc32-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "sheetjs"
        }
      ],
      "group": "",
      "name": "crc-32",
      "version": "1.2.2",
      "description": "Pure-JS CRC-32",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/crc-32@1.2.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://sheetjs.com/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/SheetJS/js-crc32.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc-32@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/crc-32/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/crc-32/package.json"
              }
            ],
            "concludedValue": "node_modules/crc-32/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "core-util-is",
      "version": "1.0.3",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/core-util-is"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-util-is/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-util-is/package.json"
              }
            ],
            "concludedValue": "node_modules/core-util-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "description": "concatenative mapdashery",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-concat-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/concat-map/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-map/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "compress-commons",
      "version": "6.0.2",
      "description": "a library that defines a common interface for working with archive formats within node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/compress-commons@6.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-compress-commons"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-compress-commons.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compress-commons@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/compress-commons/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/compress-commons/package.json"
              }
            ],
            "concludedValue": "node_modules/compress-commons/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/colorjs/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-name/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-name/package.json"
              }
            ],
            "concludedValue": "node_modules/color-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-convert/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-convert/package.json"
              }
            ],
            "concludedValue": "node_modules/color-convert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Paul Miller (https://paulmillr.com)"
        }
      ],
      "group": "",
      "name": "chokidar",
      "version": "4.0.3",
      "description": "Minimal and efficient cross-platform file watching library",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/chokidar@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/chokidar"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/paulmillr/chokidar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chokidar/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chokidar/package.json"
              }
            ],
            "concludedValue": "node_modules/chokidar/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chalk/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Briggs <beneb.info@gmail.com> (http://beneb.info)"
        }
      ],
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001792",
      "description": "A smaller version of caniuse-db, with only the essentials!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0",
            "url": "https://opensource.org/licenses/CC-BY-4.0"
          }
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001792",
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001792",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/caniuse-lite/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/caniuse-lite/package.json"
              }
            ],
            "concludedValue": "node_modules/caniuse-lite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "callsites",
      "version": "3.1.0",
      "description": "Get callsites from the V8 stack trace API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/callsites@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/callsites/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/callsites/package.json"
              }
            ],
            "concludedValue": "node_modules/callsites/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Brian J. Brennan <brianloveswords@gmail.com>"
        }
      ],
      "group": "",
      "name": "buffer-crc32",
      "version": "1.0.0",
      "description": "A pure javascript CRC32 algorithm that plays nice with binary data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/buffer-crc32@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/brianloveswords/buffer-crc32"
        },
        {
          "type": "vcs",
          "url": "git://github.com/brianloveswords/buffer-crc32.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-crc32/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-crc32/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-crc32/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "buffer",
      "version": "6.0.3",
      "description": "Node.js Buffer API, for the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/buffer@6.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Sitnik <andrey@sitnik.es>"
        }
      ],
      "group": "",
      "name": "browserslist",
      "version": "4.28.2",
      "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/browserslist@4.28.2",
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.28.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserslist/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserslist/package.json"
              }
            ],
            "concludedValue": "node_modules/browserslist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.14",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.14",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brace-expansion/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "baseline-browser-mapping",
      "version": "2.10.27",
      "description": "A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/baseline-browser-mapping@2.10.27",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/web-platform-dx/baseline-browser-mapping.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/baseline-browser-mapping@2.10.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/baseline-browser-mapping/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/baseline-browser-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/baseline-browser-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "T. Jameson Little <t.jameson.little@gmail.com>"
        }
      ],
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "description": "Base64 encoding/decoding in pure JS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/beatgammit/base64-js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/beatgammit/base64-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/base64-js/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/base64-js/package.json"
              }
            ],
            "concludedValue": "node_modules/base64-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "bare-url",
      "version": "2.4.3",
      "description": "WHATWG URL implementation for JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-url@2.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-url"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-url.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-url@2.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bare-url/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bare-url/package.json"
              }
            ],
            "concludedValue": "node_modules/bare-url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "bare-stream",
      "version": "2.13.1",
      "description": "Streaming data for JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-stream@2.13.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-stream#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stream@2.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bare-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bare-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/bare-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "bare-path",
      "version": "3.0.0",
      "description": "Path manipulation library for JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-path@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-path#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-path.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bare-path/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bare-path/package.json"
              }
            ],
            "concludedValue": "node_modules/bare-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "bare-os",
      "version": "3.9.1",
      "description": "Operating system utilities for Bare",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-os@3.9.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-os#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-os.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-os@3.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bare-os/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bare-os/package.json"
              }
            ],
            "concludedValue": "node_modules/bare-os/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "bare-fs",
      "version": "4.7.1",
      "description": "Native file system operations for Bare",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-fs@4.7.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-fs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-fs@4.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bare-fs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bare-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/bare-fs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "bare-events",
      "version": "2.8.2",
      "description": "Event emitters for JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-events@2.8.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-events#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-events.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-events@2.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bare-events/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bare-events/package.json"
              }
            ],
            "concludedValue": "node_modules/bare-events/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/balanced-match"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/balanced-match/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Holepunch"
        }
      ],
      "group": "",
      "name": "b4a",
      "version": "1.8.1",
      "description": "Bridging the gap between buffers and typed arrays",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/b4a@1.8.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/b4a#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/b4a.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/b4a@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/b4a/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/b4a/package.json"
              }
            ],
            "concludedValue": "node_modules/b4a/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Caolan McMahon"
        }
      ],
      "group": "",
      "name": "async",
      "version": "3.2.6",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/async@3.2.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://caolan.github.io/async/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/caolan/async.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async/package.json"
              }
            ],
            "concludedValue": "node_modules/async/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Amila Welihinda <amilajack@gmail.com>"
        }
      ],
      "group": "",
      "name": "ast-metadata-inferer",
      "version": "0.8.1",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ast-metadata-inferer@0.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/ast-metadata-inferer@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ast-metadata-inferer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ast-metadata-inferer/package.json"
              }
            ],
            "concludedValue": "node_modules/ast-metadata-inferer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "MDN Web Docs"
        }
      ],
      "group": "@mdn",
      "name": "browser-compat-data",
      "version": "5.7.6",
      "description": "Browser compatibility data provided by MDN Web Docs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0"
          }
        }
      ],
      "purl": "pkg:npm/%40mdn/browser-compat-data@5.7.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mdn/browser-compat-data#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mdn/browser-compat-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@mdn/browser-compat-data@5.7.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ast-metadata-inferer/node_modules/@mdn/browser-compat-data/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ast-metadata-inferer/node_modules/@mdn/browser-compat-data/package.json"
              }
            ],
            "concludedValue": "node_modules/ast-metadata-inferer/node_modules/@mdn/browser-compat-data/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "description": "CLI arguments parser. Native port of python's argparse.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Python-2.0",
            "url": "https://opensource.org/licenses/Python-2.0"
          }
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/argparse/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/argparse/package.json"
              }
            ],
            "concludedValue": "node_modules/argparse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "archiver-utils",
      "version": "5.0.2",
      "description": "utility functions for archiver",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/archiver-utils@5.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/archiver-utils#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/archiver-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver-utils@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archiver-utils/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver-utils/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "path-scurry",
      "version": "1.11.1",
      "description": "walk paths fast and efficiently",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0"
          }
        }
      ],
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/path-scurry"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archiver-utils/node_modules/path-scurry/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver-utils/node_modules/path-scurry/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver-utils/node_modules/path-scurry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "9.0.9",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@9.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@9.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archiver-utils/node_modules/minimatch/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver-utils/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver-utils/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "10.5.0",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/glob@10.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@10.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archiver-utils/node_modules/glob/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "glob"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver-utils/node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver-utils/node_modules/glob/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/buildStandaloneDist.js#4"
          },
          {
            "location": "scripts/lib/buildDistribution.js#3"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chris Talkington (http://christalkington.com/)"
        }
      ],
      "group": "",
      "name": "archiver",
      "version": "7.0.1",
      "description": "a streaming interface for archive generation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/archiver@7.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-archiver"
        },
        {
          "type": "vcs",
          "url": "https://github.com/archiverjs/node-archiver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archiver/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "archiver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archiver/package.json"
              }
            ],
            "concludedValue": "node_modules/archiver/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/buildStandaloneDist.js#6"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-styles/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "6.2.2",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@6.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-regex/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "ajv",
      "version": "6.15.0",
      "description": "Another JSON Schema Validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv@6.15.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ajv/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ajv/package.json"
              }
            ],
            "concludedValue": "node_modules/ajv/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "agent-base",
      "version": "7.1.4",
      "description": "Turn a function into an `http.Agent` instance",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/agent-base@7.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/proxy-agents.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@7.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/agent-base/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/agent-base/package.json"
              }
            ],
            "concludedValue": "node_modules/agent-base/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "5.3.2",
      "description": "Modern, fast React.js JSX parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/acorn-jsx@5.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-jsx/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-jsx/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-jsx/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.16.0",
      "description": "ECMAScript parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/acorn@8.16.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "abort-controller",
      "version": "3.0.0",
      "description": "An implementation of WHATWG AbortController interface.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/abort-controller@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/abort-controller#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/abort-controller.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abort-controller@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/abort-controller/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/abort-controller/package.json"
              }
            ],
            "concludedValue": "node_modules/abort-controller/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json-schema",
      "version": "7.0.15",
      "description": "TypeScript definitions for json-schema",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/json-schema@7.0.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/json-schema"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json-schema@7.0.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/json-schema/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/json-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/json-schema/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "estree",
      "version": "1.0.8",
      "description": "TypeScript definitions for estree",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/estree@1.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/estree@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/estree/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/estree/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/estree/package.json"
          }
        ]
      }
    },
    {
      "group": "@pkgjs",
      "name": "parseargs",
      "version": "0.11.0",
      "description": "Polyfill of future proposal for `util.parseArgs()`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/pkgjs/parseargs#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@pkgjs/parseargs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@pkgjs/parseargs/package.json"
              }
            ],
            "concludedValue": "node_modules/@pkgjs/parseargs/package.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher-linux-x64-glibc",
      "version": "2.5.6",
      "description": "A native C++ Node module for querying and subscribing to filesystem events. Used by Parcel 2.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher-linux-x64-glibc@2.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/parcel-bundler/watcher.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher-linux-x64-glibc@2.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@parcel/watcher-linux-x64-glibc/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@parcel/watcher-linux-x64-glibc/package.json"
              }
            ],
            "concludedValue": "node_modules/@parcel/watcher-linux-x64-glibc/package.json"
          }
        ]
      }
    },
    {
      "group": "@parcel",
      "name": "watcher",
      "version": "2.5.6",
      "description": "A native C++ Node module for querying and subscribing to filesystem events. Used by Parcel 2.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40parcel/watcher@2.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/parcel-bundler/watcher.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@parcel/watcher@2.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@parcel/watcher/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@parcel/watcher/package.json"
              }
            ],
            "concludedValue": "node_modules/@parcel/watcher/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "MDN Web Docs"
        }
      ],
      "group": "@mdn",
      "name": "browser-compat-data",
      "version": "6.1.5",
      "description": "Browser compatibility data provided by MDN Web Docs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0"
          }
        }
      ],
      "purl": "pkg:npm/%40mdn/browser-compat-data@6.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mdn/browser-compat-data#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mdn/browser-compat-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@mdn/browser-compat-data@6.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@mdn/browser-compat-data/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@mdn/browser-compat-data/package.json"
              }
            ],
            "concludedValue": "node_modules/@mdn/browser-compat-data/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "@isaacs",
      "name": "cliui",
      "version": "8.0.2",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zaks"
        }
      ],
      "group": "@humanwhocodes",
      "name": "retry",
      "version": "0.4.3",
      "description": "A utility to retry failed async methods.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/retry@0.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/retry.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/retry@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/retry/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanwhocodes/retry/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanwhocodes/retry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zaks"
        }
      ],
      "group": "@humanwhocodes",
      "name": "module-importer",
      "version": "1.0.1",
      "description": "Universal module importer for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/module-importer@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/module-importer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/module-importer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/module-importer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanwhocodes/module-importer/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanwhocodes/module-importer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanfs",
      "name": "types",
      "version": "0.15.0",
      "description": "The TypeScript types for the hfs project.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40humanfs/types@0.15.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/humanfs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/humanfs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanfs/types@0.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanfs/types/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanfs/types/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanfs/types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanfs",
      "name": "node",
      "version": "0.16.8",
      "description": "The Node.js bindings of the humanfs library.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40humanfs/node@0.16.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/humanfs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/humanfs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanfs/node@0.16.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanfs/node/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanfs/node/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanfs/node/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanfs",
      "name": "core",
      "version": "0.19.2",
      "description": "The core of the humanfs library.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40humanfs/core@0.19.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/humanfs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/humanfs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanfs/core@0.19.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanfs/core/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanfs/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanfs/core/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "@eslint-community",
      "name": "regexpp",
      "version": "4.12.2",
      "description": "Regular expression parser for ECMAScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint-community/regexpp@4.12.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/regexpp#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/regexpp"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/regexpp@4.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/regexpp/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/regexpp/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/regexpp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "@eslint-community",
      "name": "eslint-utils",
      "version": "4.9.1",
      "description": "Utilities for ESLint plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint-community/eslint-utils@4.9.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-utils#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-utils"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/eslint-utils@4.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/eslint-utils/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/eslint-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/eslint-utils/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "3.4.3",
      "description": "Constants and utilities about visitor keys to traverse AST.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@3.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint-visitor-keys#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/eslint-utils/node_modules/eslint-visitor-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "plugin-kit",
      "version": "0.4.1",
      "description": "Utilities for building ESLint plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/plugin-kit@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/plugin-kit#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/plugin-kit@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/plugin-kit/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/plugin-kit/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/plugin-kit/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "object-schema",
      "version": "2.1.7",
      "description": "An object schema merger/validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/object-schema@2.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/object-schema#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/object-schema@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/object-schema/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/object-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/object-schema/package.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "js",
      "version": "9.39.4",
      "description": "ESLint JavaScript language implementation",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/js@9.39.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/js@9.39.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/js/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@eslint/js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/js/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/js/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs#5"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "eslintrc",
      "version": "3.3.5",
      "description": "The legacy ESLintRC config file format for ESLint",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/eslintrc@3.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslintrc#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/eslintrc@3.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "@eslint/eslintrc,FlatCompat,@eslint/eslintrc/FlatCompat"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs#6"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "14.0.0",
      "description": "Global identifiers from different JavaScript environments",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/globals@14.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@14.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/node_modules/globals/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "globals"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/node_modules/globals/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "eslint.config.mjs#2"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "core",
      "version": "0.17.0",
      "description": "Runtime-agnostic core of ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/core@0.17.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/core#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/core@0.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/core/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/core/package.json"
          }
        ]
      }
    },
    {
      "group": "@eslint",
      "name": "config-helpers",
      "version": "0.4.2",
      "description": "Helper utilities for creating ESLint configuration",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/config-helpers@0.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/config-helpers#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/config-helpers@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/config-helpers/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/config-helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/config-helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "config-array",
      "version": "0.21.2",
      "description": "General purpose glob-based configuration matching.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/config-array@0.21.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/rewrite/tree/main/packages/config-array#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/eslint/rewrite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/config-array@0.21.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/config-array/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/config-array/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/config-array/package.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "css-tokenizer",
      "version": "3.0.4",
      "description": "Tokenize CSS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40csstools/css-tokenizer@3.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/csstools/postcss-plugins/tree/main/packages/css-tokenizer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/csstools/postcss-plugins.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/css-tokenizer@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@csstools/css-tokenizer/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@csstools/css-tokenizer/package.json"
              }
            ],
            "concludedValue": "node_modules/@csstools/css-tokenizer/package.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "css-parser-algorithms",
      "version": "3.0.5",
      "description": "Algorithms to help you parse CSS from an array of tokens.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40csstools/css-parser-algorithms@3.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/csstools/postcss-plugins/tree/main/packages/css-parser-algorithms#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/csstools/postcss-plugins.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/css-parser-algorithms@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@csstools/css-parser-algorithms/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@csstools/css-parser-algorithms/package.json"
              }
            ],
            "concludedValue": "node_modules/@csstools/css-parser-algorithms/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@csstools",
      "name": "css-color-parser",
      "version": "3.1.0",
      "description": "Parse CSS color values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40csstools/css-color-parser@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/csstools/postcss-plugins/tree/main/packages/css-color-parser#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/csstools/postcss-plugins.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/css-color-parser@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@csstools/css-color-parser/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@csstools/css-color-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@csstools/css-color-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@csstools",
      "name": "css-calc",
      "version": "2.1.4",
      "description": "Solve CSS math expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40csstools/css-calc@2.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/csstools/postcss-plugins/tree/main/packages/css-calc#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/csstools/postcss-plugins.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/css-calc@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@csstools/css-calc/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@csstools/css-calc/package.json"
              }
            ],
            "concludedValue": "node_modules/@csstools/css-calc/package.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "color-helpers",
      "version": "5.1.0",
      "description": "Color helpers to ease transformation between formats, gamut, etc",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT-0",
            "url": "https://opensource.org/licenses/MIT-0"
          }
        }
      ],
      "purl": "pkg:npm/%40csstools/color-helpers@5.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/csstools/postcss-plugins/tree/main/packages/color-helpers#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/csstools/postcss-plugins.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/color-helpers@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@csstools/color-helpers/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@csstools/color-helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/@csstools/color-helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "asamuzaK"
        }
      ],
      "group": "@asamuzakjp",
      "name": "css-color",
      "version": "3.2.0",
      "description": "CSS color - Resolve and convert CSS colors.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40asamuzakjp/css-color@3.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/asamuzaK/cssColor#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/asamuzaK/cssColor.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@asamuzakjp/css-color@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@asamuzakjp/css-color/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@asamuzakjp/css-color/package.json"
              }
            ],
            "concludedValue": "node_modules/@asamuzakjp/css-color/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/jasmine-core@6.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-29T21:43:08Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, July 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'jasmine-core' with version '6.2.0'. The package type in this SBOM is npm with 11 purl namespaces described under components. The components were identified from 240 source files."
    }
  ]
}