{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:8d336383-5143-4adb-af04-36a05026836b",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-11T09:16:46Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "multiparty",
      "group": "",
      "version": "2.2.0",
      "description": "multipart/form-data parser which supports streaming",
      "purl": "pkg:npm/multiparty@2.2.0",
      "bom-ref": "pkg:npm/multiparty@2.2.0",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/async/package.json\\nnode_modules/aws-sign/package.json\\nnode_modules/boom/package.json\\nnode_modules/chainsaw/package.json\\nnode_modules/combined-stream/package.json\\nnode_modules/commander/package.json\\nnode_modules/cookie-jar/package.json\\nnode_modules/cookiejar/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/cryptiles/package.json\\nnode_modules/debug/node_modules/ms/package.json\\nnode_modules/debug/package.json\\nnode_modules/delayed-stream/package.json\\nnode_modules/diff/package.json\\nnode_modules/emitter-component/package.json\\nnode_modules/findit/package.json\\nnode_modules/forever-agent/package.json\\nnode_modules/form-data/package.json\\nnode_modules/formidable/package.json\\nnode_modules/growl/package.json\\nnode_modules/hashish/package.json\\nnode_modules/hawk/package.json\\nnode_modules/hoek/package.json\\nnode_modules/inherits/package.json\\nnode_modules/isarray/package.json\\nnode_modules/jade/node_modules/mkdirp/package.json\\nnode_modules/jade/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/methods/package.json\\nnode_modules/mime/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/mocha/node_modules/mkdirp/package.json\\nnode_modules/mocha/package.json\\nnode_modules/ms/package.json\\nnode_modules/node-uuid/package.json\\nnode_modules/oauth-sign/package.json\\nnode_modules/qs/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/request/package.json\\nnode_modules/seq/package.json\\nnode_modules/sntp/package.json\\nnode_modules/stream-counter/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/superagent/node_modules/debug/package.json\\nnode_modules/superagent/node_modules/mime/package.json\\nnode_modules/superagent/node_modules/qs/package.json\\nnode_modules/superagent/package.json\\nnode_modules/traverse/package.json\\nnode_modules/tunnel-agent/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "tunnel-agent",
      "version": "0.2.0",
      "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.",
      "scope": "optional",
      "purl": "pkg:npm/tunnel-agent@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/tunnel-agent#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mikeal/tunnel-agent.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tunnel-agent/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tunnel-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/tunnel-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday"
        }
      ],
      "group": "",
      "name": "traverse",
      "version": "0.3.9",
      "description": "Traverse and transform objects by visiting every node on a recursive walk",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/traverse@0.3.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/js-traverse#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/js-traverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/traverse@0.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/traverse/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "superagent",
      "version": "0.14.9",
      "description": "elegant & feature rich browser / node HTTP with a fluent API",
      "scope": "optional",
      "purl": "pkg:npm/superagent@0.14.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/superagent#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/superagent.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/superagent@0.14.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/superagent/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/superagent/package.json"
              }
            ],
            "concludedValue": "node_modules/superagent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)"
        }
      ],
      "group": "",
      "name": "qs",
      "version": "0.6.5",
      "description": "querystring parser",
      "scope": "optional",
      "purl": "pkg:npm/qs@0.6.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/node-querystring#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/node-querystring.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/superagent/node_modules/qs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/superagent/node_modules/qs/package.json"
              }
            ],
            "concludedValue": "node_modules/superagent/node_modules/qs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Robert Kieffer <robert@broofa.com> (http://github.com/broofa)"
        }
      ],
      "group": "",
      "name": "mime",
      "version": "1.2.5",
      "description": "A comprehensive library for mime-type mapping",
      "scope": "optional",
      "purl": "pkg:npm/mime@1.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bentomas/node-mime#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/bentomas/node-mime.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/superagent/node_modules/mime/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/superagent/node_modules/mime/package.json"
              }
            ],
            "concludedValue": "node_modules/superagent/node_modules/mime/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "0.7.4",
      "description": "small debugging utility",
      "scope": "optional",
      "purl": "pkg:npm/debug@0.7.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/debug"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/superagent/node_modules/debug/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/superagent/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/superagent/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "description": "The string_decoder module from Node core",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/rvagg/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string_decoder/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "string_decoder"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/string_decoder/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 9
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrew Kelley <superjoe30@gmail.com>"
        }
      ],
      "group": "",
      "name": "stream-counter",
      "version": "0.2.0",
      "description": "keeps track of how many bytes have been written to a stream",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-counter@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/superjoe30/node-stream-counter#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/superjoe30/node-stream-counter.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-counter@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stream-counter/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "stream-counter"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stream-counter/package.json"
              }
            ],
            "concludedValue": "node_modules/stream-counter/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 10
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eran Hammer <eran@hueniverse.com> (http://hueniverse.com)"
        }
      ],
      "group": "",
      "name": "sntp",
      "version": "0.1.4",
      "description": "SNTP Client",
      "scope": "optional",
      "purl": "pkg:npm/sntp@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hueniverse/sntp#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hueniverse/sntp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sntp/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sntp/package.json"
              }
            ],
            "concludedValue": "node_modules/sntp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "seq",
      "version": "0.3.5",
      "description": "Chainable asynchronous flow control with sequential and parallel primitives and pipeline-style error handling",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/seq@0.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-seq#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-seq.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/seq@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/seq/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/seq/package.json"
              }
            ],
            "concludedValue": "node_modules/seq/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com>"
        }
      ],
      "group": "",
      "name": "request",
      "version": "2.16.6",
      "description": "Simplified HTTP request client.",
      "scope": "optional",
      "purl": "pkg:npm/request@2.16.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/request#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/mikeal/request.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/request/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/request/package.json"
              }
            ],
            "concludedValue": "node_modules/request/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "readable-stream",
      "version": "1.1.14",
      "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/readable-stream#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/readable-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "readable-stream"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-stream/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js",
            "line": 3
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)"
        }
      ],
      "group": "",
      "name": "qs",
      "version": "0.5.6",
      "description": "querystring parser",
      "scope": "optional",
      "purl": "pkg:npm/qs@0.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/node-querystring#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/node-querystring.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/qs/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/qs/package.json"
              }
            ],
            "concludedValue": "node_modules/qs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "oauth-sign",
      "version": "0.2.0",
      "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.",
      "scope": "optional",
      "purl": "pkg:npm/oauth-sign@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/oauth-sign#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mikeal/oauth-sign.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/oauth-sign/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/oauth-sign/package.json"
              }
            ],
            "concludedValue": "node_modules/oauth-sign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Robert Kieffer <robert@broofa.com>"
        }
      ],
      "group": "",
      "name": "node-uuid",
      "version": "1.4.8",
      "description": "Rigorous implementation of RFC4122 (v1 and v4) UUIDs.",
      "scope": "optional",
      "purl": "pkg:npm/node-uuid@1.4.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/broofa/node-uuid"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/broofa/node-uuid.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-uuid@1.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-uuid/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-uuid/package.json"
              }
            ],
            "concludedValue": "node_modules/node-uuid/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.3.0",
      "description": "Tiny ms conversion utility",
      "scope": "optional",
      "purl": "pkg:npm/ms@0.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ms/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "mocha",
      "version": "1.8.2",
      "description": "simple, flexible, fun test framework",
      "scope": "optional",
      "purl": "pkg:npm/mocha@1.8.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/mocha#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/mocha.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/mocha@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "mkdirp",
      "version": "0.3.3",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-mkdirp#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mocha/node_modules/mkdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mocha/node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/mocha/node_modules/mkdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "mkdirp",
      "version": "0.3.5",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-mkdirp#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/substack/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mkdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/mkdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Robert Kieffer <robert@broofa.com> (http://github.com/broofa)"
        }
      ],
      "group": "",
      "name": "mime",
      "version": "1.2.11",
      "description": "A comprehensive library for mime-type mapping",
      "scope": "optional",
      "purl": "pkg:npm/mime@1.2.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/broofa/node-mime#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/broofa/node-mime.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mime/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mime/package.json"
              }
            ],
            "concludedValue": "node_modules/mime/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk"
        }
      ],
      "group": "",
      "name": "methods",
      "version": "0.0.1",
      "description": "HTTP methods that node supports",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/methods@0.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/methods@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/methods/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/methods/package.json"
              }
            ],
            "concludedValue": "node_modules/methods/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "json-stringify-safe",
      "version": "3.0.0",
      "description": "Like JSON.stringify, but doesn't blow up on circular refs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/json-stringify-safe#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/json-stringify-safe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stringify-safe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stringify-safe/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stringify-safe/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "jade",
      "version": "0.26.3",
      "description": "Jade template engine",
      "scope": "optional",
      "purl": "pkg:npm/jade@0.26.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/jade#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/jade.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jade@0.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jade/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jade/package.json"
              }
            ],
            "concludedValue": "node_modules/jade/package.json"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "mkdirp",
      "version": "0.3.0",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-mkdirp#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jade/node_modules/mkdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jade/node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/jade/node_modules/mkdirp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/inherits#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/inherits.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eran Hammer <eran@hueniverse.com> (http://hueniverse.com)"
        }
      ],
      "group": "",
      "name": "hoek",
      "version": "0.7.6",
      "description": "General purpose node utilities",
      "scope": "optional",
      "purl": "pkg:npm/hoek@0.7.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/spumko/hoek#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/spumko/hoek.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.7.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hoek/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hoek/package.json"
              }
            ],
            "concludedValue": "node_modules/hoek/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eran Hammer <eran@hueniverse.com> (http://hueniverse.com)"
        }
      ],
      "group": "",
      "name": "hawk",
      "version": "0.10.2",
      "description": "HTTP Hawk Authentication Scheme",
      "scope": "optional",
      "purl": "pkg:npm/hawk@0.10.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hueniverse/hawk#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hueniverse/hawk.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@0.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hawk/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hawk/package.json"
              }
            ],
            "concludedValue": "node_modules/hawk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "hashish",
      "version": "0.0.4",
      "description": "Hash data structure manipulation functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hashish@0.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-hashish#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-hashish.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hashish@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hashish/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hashish/package.json"
              }
            ],
            "concludedValue": "node_modules/hashish/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "growl",
      "version": "1.7.0",
      "description": "Growl unobtrusive notifications",
      "scope": "optional",
      "purl": "pkg:npm/growl@1.7.0",
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/growl/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/growl/package.json"
              }
            ],
            "concludedValue": "node_modules/growl/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "formidable",
      "version": "1.0.9",
      "scope": "optional",
      "purl": "pkg:npm/formidable@1.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/formidable@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/formidable/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/formidable/package.json"
              }
            ],
            "concludedValue": "node_modules/formidable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "form-data",
      "version": "0.0.10",
      "description": "A module to create readable `\"multipart/form-data\"` streams.  Can be used to submit forms and file uploads to other web applications.",
      "scope": "optional",
      "purl": "pkg:npm/form-data@0.0.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-form-data#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/felixge/node-form-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/form-data/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/form-data/package.json"
              }
            ],
            "concludedValue": "node_modules/form-data/package.json"
          }
        ]
      },
      "tags": [
        "web"
      ]
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "forever-agent",
      "version": "0.2.0",
      "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.",
      "scope": "optional",
      "purl": "pkg:npm/forever-agent@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/forever-agent#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mikeal/forever-agent.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/forever-agent/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/forever-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/forever-agent/package.json"
          }
        ]
      },
      "tags": [
        "socket"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "findit",
      "version": "0.1.1",
      "description": "Walk a directory tree.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/findit@0.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-findit#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-findit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findit@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/findit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/findit/package.json"
              }
            ],
            "concludedValue": "node_modules/findit/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emitter-component",
      "version": "1.0.0",
      "description": "Event emitter",
      "scope": "optional",
      "purl": "pkg:npm/emitter-component@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/emitter-component@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/emitter-component/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/emitter-component/package.json"
              }
            ],
            "concludedValue": "node_modules/emitter-component/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.0.2",
      "description": "A javascript text diff implementation.",
      "scope": "optional",
      "purl": "pkg:npm/diff@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kpdecker/jsdiff#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/kpdecker/jsdiff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/diff/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/diff/package.json"
              }
            ],
            "concludedValue": "node_modules/diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "delayed-stream",
      "version": "0.0.5",
      "description": "Buffers events from a stream until you are ready to handle them.",
      "scope": "optional",
      "purl": "pkg:npm/delayed-stream@0.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-delayed-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/felixge/node-delayed-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/delayed-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/delayed-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/delayed-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Josh Junon (https://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/debug-js/debug#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/debug-js/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/vercel/ms#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/vercel/ms.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eran Hammer <eran@hueniverse.com> (http://hueniverse.com)"
        }
      ],
      "group": "",
      "name": "cryptiles",
      "version": "0.1.3",
      "description": "General purpose crypto utilities",
      "scope": "optional",
      "purl": "pkg:npm/cryptiles@0.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hueniverse/cryptiles#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hueniverse/cryptiles.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cryptiles/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cryptiles/package.json"
              }
            ],
            "concludedValue": "node_modules/cryptiles/package.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "core-util-is",
      "version": "1.0.3",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/core-util-is#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/core-util-is.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-util-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-util-is/package.json"
              }
            ],
            "concludedValue": "node_modules/core-util-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bradleymeck"
        }
      ],
      "group": "",
      "name": "cookiejar",
      "version": "1.3.0",
      "description": "simple persistent cookiejar system",
      "scope": "optional",
      "purl": "pkg:npm/cookiejar@1.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/cookiejar@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cookiejar/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cookiejar/package.json"
              }
            ],
            "concludedValue": "node_modules/cookiejar/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)"
        }
      ],
      "group": "",
      "name": "cookie-jar",
      "version": "0.2.0",
      "description": "Cookie Jar. Originally pulled form tobi, maintained as vendor in request, now a standalone module.",
      "scope": "optional",
      "purl": "pkg:npm/cookie-jar@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mikeal/cookie-jar#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mikeal/cookie-jar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-jar@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cookie-jar/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cookie-jar/package.json"
              }
            ],
            "concludedValue": "node_modules/cookie-jar/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "commander",
      "version": "0.6.1",
      "description": "the complete solution for node.js command-line programs",
      "scope": "optional",
      "purl": "pkg:npm/commander@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/visionmedia/commander.js#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/commander.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/commander/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/commander/package.json"
              }
            ],
            "concludedValue": "node_modules/commander/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "combined-stream",
      "version": "0.0.7",
      "description": "A stream that emits multiple other streams one after another.",
      "scope": "optional",
      "purl": "pkg:npm/combined-stream@0.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-combined-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/felixge/node-combined-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/combined-stream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/combined-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/combined-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "chainsaw",
      "version": "0.0.9",
      "description": "Build chainable fluent interfaces the easy way... with a freakin' chainsaw!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chainsaw@0.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/node-chainsaw#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-chainsaw.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chainsaw@0.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chainsaw/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chainsaw/package.json"
              }
            ],
            "concludedValue": "node_modules/chainsaw/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eran Hammer <eran@hueniverse.com> (http://hueniverse.com)"
        }
      ],
      "group": "",
      "name": "boom",
      "version": "0.3.8",
      "description": "HTTP-friendly error objects",
      "scope": "optional",
      "purl": "pkg:npm/boom@0.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/spumko/boom#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/spumko/boom.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/boom/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/boom/package.json"
              }
            ],
            "concludedValue": "node_modules/boom/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Egor Egorov <me@egorfine.com>"
        }
      ],
      "group": "",
      "name": "aws-sign",
      "version": "0.2.1",
      "description": "Calculates Authorization header for Amazon AWS REST requests",
      "scope": "optional",
      "purl": "pkg:npm/aws-sign@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/egorFiNE/node-aws-sign"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/egorFiNE/node-aws-sign.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/aws-sign/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/aws-sign/package.json"
              }
            ],
            "concludedValue": "node_modules/aws-sign/package.json"
          }
        ]
      },
      "tags": [
        "rest"
      ]
    },
    {
      "authors": [
        {
          "name": "Caolan McMahon"
        }
      ],
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "scope": "optional",
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/caolan/async#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/caolan/async.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async/package.json"
              }
            ],
            "concludedValue": "node_modules/async/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/multiparty@2.2.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-11T09:16:46Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, August 11, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'multiparty' with version '2.2.0'."
    }
  ]
}