{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:dc614d17-be7d-41c7-8c89-d504cec5d1f2",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-21T14:10:16Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "esbuild",
      "group": "@nx",
      "version": "19.8.4",
      "description": "The Nx Plugin for esbuild contains executors and generators that support building applications using esbuild",
      "purl": "pkg:npm/%40nx/esbuild@19.8.4",
      "bom-ref": "pkg:npm/@nx/esbuild@19.8.4",
      "author": "Victor Savkin",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://nx.dev"
        },
        {
          "type": "vcs",
          "url": "https://github.com/nrwl/nx.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@nodelib\\n@nx"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@nx",
      "name": "devkit",
      "version": "19.8.4",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nx/devkit@19.8.4",
      "type": "library",
      "bom-ref": "pkg:npm/@nx/devkit@19.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "../devkit"
        },
        {
          "name": "cdx:npm:isLink",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:../devkit"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "@nx/devkit,ExecutorContext,@nx/devkit/ExecutorContext,cacheDir,@nx/devkit/cacheDir,joinPathFragments,@nx/devkit/joinPathFragments,logger,@nx/devkit/logger,stripIndents,@nx/devkit/stripIndents,writeJsonFile,@nx/devkit/writeJsonFile,normalizePath,@nx/devkit/normalizePath,ProjectGraphProjectNode,@nx/devkit/ProjectGraphProjectNode,workspaceRoot,@nx/devkit/workspaceRoot,ProjectGraph,@nx/devkit/ProjectGraph,formatFiles,@nx/devkit/formatFiles,readProjectConfiguration,@nx/devkit/readProjectConfiguration,Tree,@nx/devkit/Tree,updateProjectConfiguration,@nx/devkit/updateProjectConfiguration,writeJson,@nx/devkit/writeJson,addDependenciesToPackageJson,@nx/devkit/addDependenciesToPackageJson,GeneratorCallback,@nx/devkit/GeneratorCallback,getProjects,@nx/devkit/getProjects,readJsonFile,@nx/devkit/readJsonFile,@nx/devkit/src/utils/async-iterable,createAsyncIterable,@nx/devkit/src/utils/async-iterable/createAsyncIterable,@nx/devkit/src/generators/target-defaults-utils,addBuildTargetDefaults,@nx/devkit/src/generators/target-defaults-utils/addBuildTargetDefaults,@nx/devkit/src/utils/replace-package,replaceNrwlPackageWithNxPackage,@nx/devkit/src/utils/replace-package/replaceNrwlPackageWithNxPackage"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 2
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 9
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 84
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 144
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 146
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 199
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 200
          },
          {
            "location": "src/executors/esbuild/lib/build-esbuild-options.ts",
            "line": 10
          },
          {
            "location": "src/executors/esbuild/lib/build-esbuild-options.ts",
            "line": 149
          },
          {
            "location": "src/executors/esbuild/lib/build-esbuild-options.ts",
            "line": 210
          },
          {
            "location": "src/executors/esbuild/lib/build-esbuild-options.ts",
            "line": 231
          },
          {
            "location": "src/executors/esbuild/lib/get-extra-dependencies.ts",
            "line": 1
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 7
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 23
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 30
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 57
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 8
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 28
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 34
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 44
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 45
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 50
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 64
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 79
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 89
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 112
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 114
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 115
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 124
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 126
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 127
          },
          {
            "location": "src/generators/init/init.ts",
            "line": 6
          },
          {
            "location": "src/generators/init/init.ts",
            "line": 14
          },
          {
            "location": "src/generators/init/init.ts",
            "line": 27
          },
          {
            "location": "src/migrations/update-16-0-0-add-nx-packages/update-16-0-0-add-nx-packages.ts",
            "line": 1
          },
          {
            "location": "src/migrations/update-16-0-0-add-nx-packages/update-16-0-0-add-nx-packages.ts",
            "line": 7
          },
          {
            "location": "src/migrations/update-16-0-1-set-thirdparty-true/update-16-0-1-set-thirdparty-true.ts",
            "line": 7
          },
          {
            "location": "src/migrations/update-16-0-1-set-thirdparty-true/update-16-0-1-set-thirdparty-true.ts",
            "line": 10
          },
          {
            "location": "src/migrations/update-16-0-1-set-thirdparty-true/update-16-0-1-set-thirdparty-true.ts",
            "line": 34
          },
          {
            "location": "src/migrations/update-16-0-1-set-thirdparty-true/update-16-0-1-set-thirdparty-true.ts",
            "line": 38
          },
          {
            "location": "src/utils/get-entry-points.ts",
            "line": 1
          },
          {
            "location": "src/utils/get-entry-points.ts",
            "line": 50
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 22
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 114
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 15
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 43
          },
          {
            "location": "src/migrations/update-16-0-0-add-nx-packages/update-16-0-0-add-nx-packages.ts",
            "line": 2
          },
          {
            "location": "src/migrations/update-16-0-0-add-nx-packages/update-16-0-0-add-nx-packages.ts",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "@nx",
      "name": "js",
      "version": "19.8.4",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nx/js@19.8.4",
      "type": "library",
      "bom-ref": "pkg:npm/@nx/js@19.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "../js"
        },
        {
          "name": "cdx:npm:isLink",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:../js"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "ImportedModules",
          "value": "@nx/js,copyAssets,@nx/js/copyAssets,copyPackageJson,@nx/js/copyPackageJson,CopyPackageJsonOptions,@nx/js/CopyPackageJsonOptions,printDiagnostics,@nx/js/printDiagnostics,runTypeCheck,@nx/js/runTypeCheck,TypeCheckOptions,@nx/js/TypeCheckOptions,readTsConfig,@nx/js/readTsConfig,@nx/js/src/utils/buildable-libs-utils,DependentBuildableProjectNode,@nx/js/src/utils/buildable-libs-utils/DependentBuildableProjectNode,@nx/js/src/utils/get-import-path,getImportPath,@nx/js/src/utils/get-import-path/getImportPath,@nx/js/src/utils/versions,esbuildVersion,@nx/js/src/utils/versions/esbuildVersion"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 17
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 55
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 110
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 249
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 256
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 10
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 16
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 29
          },
          {
            "location": "src/executors/esbuild/lib/get-extra-dependencies.ts",
            "line": 2
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 10
          },
          {
            "location": "src/generators/configuration/configuration.ts",
            "line": 49
          },
          {
            "location": "src/generators/init/init.ts",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-glob",
      "version": "3.2.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad818c4708a9ea550cbd80f705349c3304f51ed02cd9def548cbfae95af1b3421e9066448e1334a5c31f8d03e792706ddb3782c10304ba988dd3664fe03893d5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-glob@3.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-glob/-/fast-glob-3.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-glob@3.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-glob/-/fast-glob-3.2.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "fast-glob"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/utils/get-entry-points.ts",
            "line": 4
          },
          {
            "location": "src/utils/get-entry-points.ts",
            "line": 53
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.stat",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46484f3e9db3aea0c0400ff68cd867ced70f025bfae17761229edaef8e78039a2f23b06e93182decc5fbb9dc00bb7ce0d437293d4d2bcf7555d5279aaaf638f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.walk",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0607e53196059c810920c28f067041b07a6a1316ddc520ef5a6da6c199a1b05c8a01299f864f2d293f5f396de1a0ecb96287f3521d25765c0b35967ce7a1c4a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.scandir",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "beadb806adf29b91c4426d8d282af7c970f08dceef4ec1138510e7929d832bda75baa2d1f831eeae6fcd393a34286ec760753b7a9a4a663dcccaa62e3017fada"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-parallel",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e65e15c9947ce8b67f943c594d1ea3a8bf00144d92d0814b30fdba01b8ec2d5003c4776107f734194b07fb2dfd51f0a2dddcf3f0e950b8f9a768938ca031d004"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/run-parallel@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/run-parallel/-/run-parallel-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-parallel@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/run-parallel/-/run-parallel-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "queue-microtask",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e68d49ae9f94a4f925a498433268934e09cd32f5080e9a1a1bf9adf2d6dcf82a03e3360a1a59427002f21f22e19164052f17e51aa40c11c0eebe217a3dcaf4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/queue-microtask@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/queue-microtask/-/queue-microtask-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/queue-microtask@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/queue-microtask/-/queue-microtask-1.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastq",
      "version": "1.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cabf99e72ecea72c5ef536088a24b21914b90fc8812e3ac7a52c6eee8d99c6ad17d02bc1e9bd8f96a8a84025401d2e89b054712b552e0b7f11653ead3f15303"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fastq@1.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fastq/-/fastq-1.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastq@1.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fastq/-/fastq-1.20.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reusify",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83a4147dfd38a19a47b34786e69f37ac52e11de574d2e83f61ff6764ce9f2de52b3e0b814e44d039da40596b29321e794d97d54033da37735025f6d5440c5d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/reusify@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/reusify/-/reusify-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reusify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/reusify/-/reusify-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob-parent/-/glob-parent-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob-parent/-/glob-parent-5.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-glob/-/is-glob-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-glob/-/is-glob-4.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49b29b00d90deb4dd58b88c466fe3d2de549327e321b0b1bcd9c28ac4a32122badb0dde725875b3b7eb37e1189e90103a4e6481640ed9eae494719af9778eca1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-extglob/-/is-extglob-2.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge2",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/merge2@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/merge2/-/merge2-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge2@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/merge2/-/merge2-1.4.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d7c1f06162ed210423f0f039f413e58361beda7f77522d558a8b71c6bfce08745e13c85a02d32b3115dd06a31c3b9d2bf84ff3f3109431b18b0488508aa3604"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/micromatch@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/micromatch/-/micromatch-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/micromatch/-/micromatch-4.0.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c906d780efce499543d88b222e5ae8fbb1dfe90d7c109aca484b1da0ccca78f29772dde0bc3f282dc390748cc6ba9af9163f840def203bf9717350737cca71bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/braces@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/braces/-/braces-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/braces/-/braces-3.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62c1a97b75872caf19622e2d583836272dde6d1cf6ad7a300f19e57786e4401d3471cff5670f405a70b48bdced0c98ad8afb50bda23d29a2f22ab73e8415b4ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fill-range@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fill-range/-/fill-range-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fill-range/-/fill-range-7.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/to-regex-range/-/to-regex-range-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/to-regex-range/-/to-regex-range-5.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-number/-/is-number-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-number/-/is-number-7.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57bfaf404274e99f9ce6d4b27bc4be9c751f239d71a172178c743df5c42d294910aaa3b590efca08951f657b81e3b87f60194385a8761f785d5065e7f227b4a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picomatch/-/picomatch-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picomatch/-/picomatch-2.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "1.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c787dac9e1b5be4cf658aa0ec984c39ea57b7efa993664117fe311bfd1c4d1727a036e97b78db250973fd1438ff2dcbb45fc284c8c71e3f69eda5a1eb0c454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picocolors/-/picocolors-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picocolors/-/picocolors-1.1.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "picocolors"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 1
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 33
          },
          {
            "location": "src/executors/esbuild/esbuild.impl.ts",
            "line": 36
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 8
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 31
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 32
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 34
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 36
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 58
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 59
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 61
          },
          {
            "location": "src/executors/esbuild/lib/normalize.ts",
            "line": 63
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tsconfig-paths",
      "version": "4.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "368678ae888decb9db2a7f50a84d5a99cf4325fcef657c45e310dabdc396b7504f91dc7e9bed2026e3ccf92d2f09eef34c931850fd11f293b65ccafe63ca0b22"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tsconfig-paths@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tsconfig-paths/-/tsconfig-paths-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tsconfig-paths@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tsconfig-paths/-/tsconfig-paths-4.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "tsconfig-paths"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "src/executors/esbuild/lib/build-esbuild-options.ts",
            "line": 311
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e63967bb7b21d81f5e1c2dd54fa3283e18e1f7ad85fef8aa73af2949c125bdf2ddcd93e53c5ce97c15628e830b7375bf255c67facd8c035337873167f16acca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json5@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/json5/-/json5-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/json5/-/json5-2.2.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/esbuild/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-1.2.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdabc03115ce80154d17a9f210498bdc304ad7d891a437282305beb3043e09b1a2bbb963bbab7e264940d4c1f07a85ad69d82de0849552c5cbc83ab7e1d75cc0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/strip-bom/-/strip-bom-3.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "2.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0916ef781d06fe29576e49440bef09e99aa9df98bb0e03f9c087a6fa107d30084a0ad3f98f79753a737c0a0d5f373243ae1cf447b525ca294f7d2016b34bfdb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tslib@2.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tslib/-/tslib-2.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tslib/-/tslib-2.8.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@nx/devkit@19.8.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@nx/js@19.8.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/queue-microtask@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/run-parallel@1.2.0",
      "dependsOn": [
        "pkg:npm/queue-microtask@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/run-parallel@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/reusify@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fastq@1.20.3",
      "dependsOn": [
        "pkg:npm/reusify@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.scandir@2.1.5",
        "pkg:npm/fastq@1.20.3"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@4.0.3",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@5.1.2",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/merge2@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@5.0.1",
      "dependsOn": [
        "pkg:npm/is-number@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@7.1.1",
      "dependsOn": [
        "pkg:npm/to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/braces@3.0.3",
      "dependsOn": [
        "pkg:npm/fill-range@7.1.1"
      ]
    },
    {
      "ref": "pkg:npm/picomatch@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/micromatch@4.0.8",
      "dependsOn": [
        "pkg:npm/braces@3.0.3",
        "pkg:npm/picomatch@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-glob@3.2.7",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/@nodelib/fs.walk@1.2.8",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/micromatch@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/picocolors@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@2.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tsconfig-paths@4.2.0",
      "dependsOn": [
        "pkg:npm/json5@2.2.3",
        "pkg:npm/minimist@1.2.8",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tslib@2.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@nx/esbuild@19.8.4",
      "dependsOn": [
        "pkg:npm/@nx/devkit@19.8.4",
        "pkg:npm/@nx/js@19.8.4",
        "pkg:npm/fast-glob@3.2.7",
        "pkg:npm/picocolors@1.1.1",
        "pkg:npm/tsconfig-paths@4.2.0",
        "pkg:npm/tslib@2.8.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@nx/esbuild@19.8.4"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-21T14:10:16Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'esbuild' with version '19.8.4'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}