{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:6df01752-1c66-4fef-aa9a-21e3f91e7be1",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-21T14:02:50Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "next-tick",
      "group": "",
      "version": "0.2.2",
      "description": "Environment agnostic nextTick polyfill",
      "purl": "pkg:npm/next-tick@0.2.2",
      "bom-ref": "pkg:npm/next-tick@0.2.2",
      "author": "Mariusz Nowak <medykk@medikoo.com> (http://www.medikoo.com/)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/medikoo/next-tick.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "tad",
      "version": "0.1.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5db326841d2fb461ad55b7ad8e25d8b90b5f82e1cffce39cbcd309e29d30eae7540538446de123c6505ea10f5be4b11f352e29b3d7884ecd3c94cd3c3c2abf65"
        }
      ],
      "purl": "pkg:npm/tad@0.1.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tad/-/tad-0.1.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tad@0.1.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tad/-/tad-0.1.21.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/tad"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/tad"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tad"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-color",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f80c51d77687b6ac6330b953be0d304ce82912b789bd4786b4be39eae4226448229a5dbac76ec9429b28c6e9ccffa39d073f6c248cedc6d665ef73b1b75752d"
        }
      ],
      "purl": "pkg:npm/cli-color@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cli-color/-/cli-color-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-color@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cli-color/-/cli-color-0.2.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/cli-color"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0fdce4b16742ffa8aefab7aab13d1f205abda8e45e12ccd17da92e45fe639f558dc4cdc834eefea14a41130e6a1e9172339fcc6141b1e9a7eb5594e13ea8e02"
        }
      ],
      "purl": "pkg:npm/es5-ext@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/es5-ext/-/es5-ext-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/es5-ext/-/es5-ext-0.9.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/es5-ext"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memoizee",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d15648d1bb70c8693a1520e7246b89b6ca3833f792c6155be480f90193563051604f62dec42575f211c8efae15e042ca9727e743928c43eab91f7baf14ddcc2f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/memoizee@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/memoizee/-/memoizee-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memoizee@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/memoizee/-/memoizee-0.2.6.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/memoizee"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91d8dfc45ea3609e66fce11edd934d2736c211c6a017894d25eba182b052467962b697712020cacc27a5f99e566e5ecaf5484137fee4d8ccd706f0af4b07f3ce"
        }
      ],
      "purl": "pkg:npm/event-emitter@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/event-emitter/-/event-emitter-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/event-emitter/-/event-emitter-0.2.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/event-emitter"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next-tick",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "238e1059e1821c94f1d83ddbba19e58ef4a398f809b9adf374f1ad942404bc0e39b7d912fc26879e556a89d4f31f0abc2c65e10f648c7b38e4e214203fedf62e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/next-tick@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/next-tick/-/next-tick-0.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next-tick@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/next-tick/-/next-tick-0.1.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/next-tick"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "clock",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "792665c45e12a5a21d43d9ebe761c269cf229a7a427d50178ea8bdde4cdcf6c83b3f69d7244758e180e8b10f8c3d40388ac6e358450acaa21194a8ab27de88d8"
        }
      ],
      "purl": "pkg:npm/clock@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/clock/-/clock-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clock@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/clock/-/clock-0.1.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/clock"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deferred",
      "version": "0.6.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d6aa96a90139d3f2b94032ae1607b6bde243a58f9b8922ebeb45054e6dfb47912c73fc266c58eeeabfb24176c7e21de799d67243eb62c98252bbcc58cbf9216"
        }
      ],
      "purl": "pkg:npm/deferred@0.6.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/deferred/-/deferred-0.6.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deferred@0.6.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/deferred/-/deferred-0.6.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/deferred"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duration",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be5f948ec65459d3ce920c9b151f330cfdd0d13c76a60d733d87a3f32dfcb8bb06a9732c05bfad48abb11a984f5d8c206b987ac742f7a35e2fb8a995376defb6"
        }
      ],
      "purl": "pkg:npm/duration@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/duration/-/duration-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duration@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/duration/-/duration-0.1.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/duration"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs2",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8dcf2367cabfb7cf614c2aa679742996a8c5d6aa71f0032a4795150fb1a030f6034683e358035afa724408ecc0b918636801576a6b17deb166b500aa90a5c6ce"
        }
      ],
      "purl": "pkg:npm/fs2@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fs2/-/fs2-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs2@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fs2/-/fs2-0.1.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/fs2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd9f89cbc9555a5beaa9e33c89907bc3b2a6424a099fc763339f39cfcf2bcb0ac46f3a2a6b055af45479a768700fecbbe277ee28e8e636f8bd82d58934ba87bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/minimatch"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7559909973c1953805c3bee19bad2e77ffe5d9b0ae0ca92a0b6a27d4406833bb3d52b9bd2100eb9ee8f067ddcd16702ad1d559d070574d2ecfc041be604efe11"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.5.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/lru-cache"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5edaf127805fe670e749c076d94d1fb744e90932d216990f02ea27df6dd7f66170628c335aeb016ee9f13ac8b690ee856f6f6b7876713cd1e038bfdf30da8ca1"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/sigmund"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfc9295067a53b71b387d5b82ccbe83d35dee23336dc2bf6fd4c6a6717843bd92157892cf83dec70df6f30377892a3a058a2de1a8314af0a8275e596e8f8890c"
        }
      ],
      "purl": "pkg:npm/next@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/next/-/next-0.3.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/next/-/next-0.3.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/next"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b273783b84e48a0ba36698562cdd04fff9d09a6efbf74458684e770dd2fb658c1e7b60fc0c3a3dfc4c9888a51f377ae77965238499ee7a28dadc6f48da2d21de"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/optimist/-/optimist-0.6.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/optimist"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/minimist"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wordwrap/-/wordwrap-0.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/wordwrap"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75f6f3780234f6d8c93344c2c71ccbccf9c700ef205c737a29a67a37dcc175ed983855ee9c73baf6d7adcff6a2f775d1b0e3a4126f2ae0813730907f465b33c4"
        }
      ],
      "purl": "pkg:npm/test@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test/-/test-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test/-/test-0.6.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/test"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-font",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "174ffbc2fb14c45dfc6d6501d722363b80b19b4e1752f9c5e5e9909af8c9c8f8d891b4db890479d691e6c6e1415244ef580daf1b452fce6dbf4d4fad7854f0c2"
        }
      ],
      "purl": "pkg:npm/ansi-font@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-font/-/ansi-font-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-font@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ansi-font/-/ansi-font-0.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/ansi-font"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/es5-ext@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/event-emitter@0.2.2",
      "dependsOn": [
        "pkg:npm/es5-ext@0.9.2"
      ]
    },
    {
      "ref": "pkg:npm/next-tick@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/memoizee@0.2.6",
      "dependsOn": [
        "pkg:npm/es5-ext@0.9.2",
        "pkg:npm/event-emitter@0.2.2",
        "pkg:npm/next-tick@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-color@0.2.3",
      "dependsOn": [
        "pkg:npm/es5-ext@0.9.2",
        "pkg:npm/memoizee@0.2.6"
      ]
    },
    {
      "ref": "pkg:npm/clock@0.1.5",
      "dependsOn": [
        "pkg:npm/es5-ext@0.9.2",
        "pkg:npm/event-emitter@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/deferred@0.6.8",
      "dependsOn": [
        "pkg:npm/es5-ext@0.9.2",
        "pkg:npm/event-emitter@0.2.2",
        "pkg:npm/next-tick@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/duration@0.1.4",
      "dependsOn": [
        "pkg:npm/es5-ext@0.9.2"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.14",
      "dependsOn": [
        "pkg:npm/lru-cache@2.5.0",
        "pkg:npm/sigmund@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs2@0.1.5",
      "dependsOn": [
        "pkg:npm/deferred@0.6.8",
        "pkg:npm/es5-ext@0.9.2",
        "pkg:npm/event-emitter@0.2.2",
        "pkg:npm/memoizee@0.2.6",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/next@0.3.3",
      "dependsOn": [
        "pkg:npm/deferred@0.6.8",
        "pkg:npm/es5-ext@0.9.2",
        "pkg:npm/memoizee@0.2.6"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-font@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test@0.6.0",
      "dependsOn": [
        "pkg:npm/ansi-font@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/tad@0.1.21",
      "dependsOn": [
        "pkg:npm/cli-color@0.2.3",
        "pkg:npm/clock@0.1.5",
        "pkg:npm/deferred@0.6.8",
        "pkg:npm/duration@0.1.4",
        "pkg:npm/es5-ext@0.9.2",
        "pkg:npm/event-emitter@0.2.2",
        "pkg:npm/fs2@0.1.5",
        "pkg:npm/next@0.3.3",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/test@0.6.0"
      ]
    },
    {
      "ref": "pkg:npm/next-tick@0.2.2",
      "dependsOn": [
        "pkg:npm/tad@0.1.21"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/next-tick@0.2.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-21T14:02:50Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'next-tick' with version '0.2.2'."
    }
  ]
}