{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:7ccc0625-924b-42ed-bc1f-d32c4b47fb81",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-31T02:04:35Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "zod-bundle",
      "group": "",
      "version": "0.0.1",
      "purl": "pkg:npm/zod-bundle@0.0.1",
      "bom-ref": "pkg:npm/zod-bundle@0.0.1",
      "properties": [],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "zip-bundle",
          "version": "0.0.1",
          "purl": "pkg:npm/zip-bundle@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/zip-bundle@0.0.1"
        },
        {
          "group": "",
          "name": "utils-bundle",
          "version": "0.0.1",
          "purl": "pkg:npm/utils-bundle@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/utils-bundle@0.0.1"
        },
        {
          "group": "",
          "name": "mcp-bundle",
          "version": "0.0.1",
          "purl": "pkg:npm/mcp-bundle@0.0.1",
          "type": "application",
          "bom-ref": "pkg:npm/mcp-bundle@0.0.1",
          "tags": [
            "mcp",
            "mcp-sdk"
          ],
          "properties": [
            {
              "name": "cdx:mcp:package",
              "value": "true"
            },
            {
              "name": "cdx:mcp:official",
              "value": "false"
            },
            {
              "name": "cdx:mcp:role",
              "value": "sdk"
            },
            {
              "name": "cdx:mcp:catalogSource",
              "value": "heuristic"
            },
            {
              "name": "cdx:mcp:packageName",
              "value": "mcp-bundle"
            }
          ]
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@hono\\n@modelcontextprotocol\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "bundles/mcp/package-lock.json\\nbundles/utils/package-lock.json\\nbundles/zip/package-lock.json\\nbundles/zod/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "zod",
      "version": "4.3.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "adfb65ae484764e7230f090696752d65992f68f1c2b03013a78a46a6e38e3036937430d717dd70b950c9a16a0fb0a5ffdd83d0e5f1ee1774938dc6322abf9086"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/zod@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zod@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zod/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "zod-to-json-schema,zod"
        },
        {
          "name": "ImportedModules",
          "value": "zod,zod/z"
        },
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/zod/src/zodBundleImpl.ts#17"
          },
          {
            "location": "src/tools/backend/tool.ts#17"
          },
          {
            "location": "src/tools/cli-daemon/command.ts#19"
          },
          {
            "location": "src/tools/cli-daemon/helpGenerator.ts#21"
          },
          {
            "location": "src/tools/utils/mcp/tool.ts#18"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e964d9fc8c4263f4fa0402e8647684e1cb69f719be679918fe9cd86821d115ec958688f196b9bee3acbaf0703a86bd1373012cb28c4d8831142508df3d9fd160"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/zip/src/third_party/extract-zip.js#27"
          },
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#22"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "5.2.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c117e175ac06550aefe9eeb8f3800f986f895f617ae997b6ba56626b53cc05f48d422af3ff4303cd6479ce9706d3918e9dbed148cc5312c905db2e84d03d1a4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/get-stream@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-5.2.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "get-stream"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/zip/src/third_party/extract-zip.js#30"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pump",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b543d7b7394633c144dcfd192fa0d5b3fdcfe7c93d9e4f3f8d97900aead327295003ca856331c57e104992eab21341627ceb10d2e2967a4899e60f30b6bdbc73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/pump@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pump/-/pump-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pump/-/pump-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yauzl",
      "version": "3.2.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9358ac89f75ba4d485107149d596386037b0bf4207f4547ad650deb5a44c0f78f669eddb217195fbb73e2c70aab501a87d277c3c8c95e17ebe7473009d2afad0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/yauzl@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yauzl/-/yauzl-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yauzl@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yauzl/-/yauzl-3.2.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "yauzl"
        },
        {
          "name": "ImportedModules",
          "value": "yauzl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/zip/src/third_party/extract-zip.js#34"
          },
          {
            "location": "bundles/zip/src/zipBundleImpl.ts#18"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d333e3f00eac50aa1454abd30ef8c2a5d9a7242"
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pend",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1776acbf8d94b97721773b7ec57a9f5b538695505efa6c5ada6a88d29839c801d93ef16663763a76b49ffc643503ce9681610df4ace1fd6ae029aea219c1d72e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/pend@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pend@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yazl",
      "version": "2.5.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6110d8b63cb8879c76fa401568b7e7499da019d31a2c8fba777d697ece7223043967308d8fb19089677d3a04f4c539a1dfe6a743108f31e6a16b48e04de6faf"
        }
      ],
      "purl": "pkg:npm/yazl@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yazl/-/yazl-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yazl@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yazl/-/yazl-2.5.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "yazl"
        },
        {
          "name": "ImportedModules",
          "value": "yazl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/zip/src/zipBundleImpl.ts#17"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yauzl",
      "version": "2.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a09a1fb6fd0b4ae683644dcb7b80db297f8a4bd1b7e8dcce7926a9f745082b4c8c03f36128986a9521ad3433913516886d07f38d70eb41ad32b49ea63511b3fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/yauzl@2.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yauzl@2.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "17.0.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6af78261141b8131fd3ecb29d6fa043fb1e2b96943da35b604ee7ac3e6d5ac99f4e22eb5ca1ea645fa0a3ba8446100fdbc5f96f02864c1cea3d4cdfab8f931e2"
        }
      ],
      "purl": "pkg:npm/%40types/node@17.0.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-17.0.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@17.0.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-17.0.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yazl",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fef491fc3b682e1235cdc6a9b26f343dda6254876a02c030cc4928a66527b53fea5c79988544e64b62671baa4cd5e44530cfa57070a5c23b64b6c94a6b6ba5d"
        }
      ],
      "purl": "pkg:npm/%40types/yazl@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/yazl/-/yazl-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yazl@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/zip/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/yazl/-/yazl-2.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/zip/package-lock.json"
              }
            ],
            "concludedValue": "bundles/zip/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6be52a4e1e2481983f4a51af7dbcc31e9811bbb00040e9a6a911c99f185164808a1544fdd5bad584d36de7c08c594f4fb016efdcf0c26541db571b83887da6b4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/colors@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "colors/safe"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#19"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "13.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "feb15e0a934941b852663195c0ef51155df13ea6e71114bc326210cc2b43ff397a82926e57f6cc2ee37dda81b717b77ca031071d1aee8d25cd52bf1fa639ed2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/commander@13.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-13.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@13.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-13.1.0.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "commander"
        },
        {
          "name": "ImportedModules",
          "value": "commander"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#55"
          },
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#56"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d15851ee494dde0ed4093ef9cd63b25c91eb758f4b793ae3ac1733cfcec7a40f9d9997ca947c520f122b305ea22f1d61951ce817fbb1bfbc234d85e870c5f91"
        }
      ],
      "purl": "pkg:npm/debug@4.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/zip/src/third_party/extract-zip.js#27"
          },
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#22"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "8.0.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cf8b41668e2494e44bd0574fbe1850ce27d012414545879903f8ecce9d8762ee7dd6a66f6159619f07f3b66e57c770c5532f95a44174a74622bd99a921adc9f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/diff@8.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-8.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@8.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-8.0.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "diff"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#28"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dotenv",
      "version": "16.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66674bdabba2f9e07663086c5b38c89d1f0b95db591c60e8435ba01fce69a472b0a541cbee3eeb3744e2f4d0a71a241b85a675d45a51fbb6a8d5d36c99db8d52"
        }
      ],
      "purl": "pkg:npm/dotenv@16.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dotenv@16.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "dotenv"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#31"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.10",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f41ca1b2c4767cf56c3598f8efca9451b29f98bd3eb790435728d286dc9964b88aed90c002b1457e8a723938f4334e70136b493e2b00e224e79d79766283ef38"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "graceful-fs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/third_party/lockfile.js#29"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-proxy-agent",
      "version": "7.0.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bcaf4fe7f8947dd97de4023e255c94b88715b5de287efb6b3abdc736d336cb10bd6e731b11da77c74d4e8503678dbf082588b7f159531379815f071fbf2c2e4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@7.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "https-proxy-agent"
        },
        {
          "name": "ImportedModules",
          "value": "https-proxy-agent"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#36"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "agent-base",
      "version": "7.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32703e613f1fc1f24f801c779bad0c36a6a49b7d173a4c88a07d72ea1b9342f0b43f0646ee48bc35a70b05cacf6cda28f2f119cbb269ba4efe8cc3be094a2f4d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/agent-base@7.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@7.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "6.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2014dd224cd934ea6a9bbab7751a89bcc6a57578c31d69040dfaf0184413b3979a40c595f9d8c0851fb06a1c8d34c01afaaa5b0d4841315b7864a370a4f9bbc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/ini@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ini/-/ini-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-6.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "ini"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#25"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jpeg-js",
      "version": "0.4.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "599cde0ce12d4ce04ae0c76c6abd08a84539b0caf7bd257646a9002335045760479d47ca1b2b305853c5c0ae44783a3ddcadc5a214876cb0238f4b355b377e76"
        }
      ],
      "purl": "pkg:npm/jpeg-js@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jpeg-js@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jpeg-js/-/jpeg-js-0.4.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "jpeg-js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#38"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "3.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d2094eff541d65a0858165ed7868460753ffb550c107a1a3bbab108e5493b0f46807ef65405a9a7135c8d4fb1f5ada4dc648805734ac57405a91bef67bbebdc"
        }
      ],
      "purl": "pkg:npm/mime@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-3.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "mime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#44"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7098bf92f3eef222c13dc2caa0cd4dc4f3f2ee98ddccdd010bac1676d0e76643d8c1d89bd6e6866d04499fb7ce24fc6b39086f66aad59ce98f6f5be244cc6c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "minimatch"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#47"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f53f548d6debd145b973543b193c25969b57c21bd8984cc587331f67d1fb1505adfae65e3e364f8c13ff5b5644c99d6dc065a89b9ff9e9317894f72a8e70c772"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "open",
      "version": "8.4.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e014f3ccf81dbc16d0828126fd23eb3db33382d6f6514b0816b11500e72948c514e02a8cea8ce0ab54ea86b180013d82b9aa77ea0a5c594c505af0f2addafe9"
        }
      ],
      "purl": "pkg:npm/open@8.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/open/-/open-8.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/open@8.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/open/-/open-8.4.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "open"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#50"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-lazy-prop",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ecd3da8d87ccb0de48528e22638942276865fdc65a990d8ec956bc86c5dc55ecd3debaa41fa653a943aeb224566eb778cb6b9ccec245f0d60f44236b8a8783a"
        }
      ],
      "purl": "pkg:npm/define-lazy-prop@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-lazy-prop@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-docker",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17e8b604ab05ac7eba89a505734c280fcb0bcbc81eb64c13c2d3818efb39e82c780a024378a41ea9fcfcc0062249bf093a9ad68471f9a7becf6e6602bef52e5d"
        }
      ],
      "purl": "pkg:npm/is-docker@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-docker@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-wsl",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cacc0adad2b18951407018180d90766e4e865c9fe4ed5c7a5e0a09a430930c631d6c40361a092ca32414826b69c7d431a6eecde7d68067a21a154c168decbc3"
        }
      ],
      "purl": "pkg:npm/is-wsl@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pngjs",
      "version": "6.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d1cf3b85451984a125bfa7529502688e80f728d88ae56a1f9b18509e35f257c71606c12c3b63000e01c77b5f6f0afe6e5b8c158ab02dbd2b2a0c7c76f2a5aca"
        }
      ],
      "purl": "pkg:npm/pngjs@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pngjs/-/pngjs-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pngjs@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pngjs/-/pngjs-6.0.0.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "pngjs"
        },
        {
          "name": "ImportedModules",
          "value": "pngjs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#53"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "2.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecf887b4b965e4b767288330d74d08fbcc495d1e605b6430598913ea226f6b46d78ad64a6bf5ccad26dd9a0debd979da89dcfd42e99dd153da32b66517d57db0"
        }
      ],
      "purl": "pkg:npm/progress@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "progress"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#58"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-from-env",
      "version": "2.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "876943dce7d1ada3f7479d6b34528813c9d7faaa0baf5984ef85fdd58855c6d0dbb7e383ea7b68359bf9ebe26023844276dc10e5e7b1b0e93529d3900dfbcf09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/proxy-from-env@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-from-env@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.0.0.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "proxy-from-env"
        },
        {
          "name": "ImportedModules",
          "value": "proxy-from-env"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#34"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "retry",
      "version": "0.12.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4b9224f08d487aad3e79e43b44f6b4d7f81281c8f7eb333100b67944b5d130af73647dfc228a1a9ed9b5800e0f8e4118edf6097a20276607f6450c2180b52a3"
        }
      ],
      "purl": "pkg:npm/retry@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "retry"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/third_party/lockfile.js#30"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "signal-exit"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/third_party/lockfile.js#31"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socks-proxy-agent",
      "version": "8.0.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1de84212ca2d16a6cf5bdb09f1655807a51b98832fee4514391205d8d9dcab8550bc17cd04b89b5bd619479765602494870703eb6f29465966ee7f84f984f327"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/socks-proxy-agent@8.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-8.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-8.0.5.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "socks-proxy-agent"
        },
        {
          "name": "ImportedModules",
          "value": "socks-proxy-agent"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#61"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socks",
      "version": "2.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "979c7b5545166e35456da7c62f13d6918b0722112f985f39b5b21e15959cf193eda0ccb26ee1212fb2727bfa280b8fdde3c1603a34895e0b05fc024f6025bc67"
        }
      ],
      "purl": "pkg:npm/socks@2.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socks/-/socks-2.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socks@2.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socks/-/socks-2.8.3.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "socks-proxy-agent"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip-address",
      "version": "9.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc7b50cc6a236574f06531d0aab6be11329de129f7be08bbb819a53e85d5599a98bee2a6b48d25fd56538ea1a6258f71f3c18639a67df86f444bc842e13e17f2"
        }
      ],
      "purl": "pkg:npm/ip-address@9.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ip-address/-/ip-address-9.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip-address@9.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ip-address/-/ip-address-9.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1b61557768032d0d34eee3ec6c0d86bab32f46c89ebdfda9acbbdb18176cea8e2128640e71262dc1adf5f7b98fbf21e908bbb33074e6dd6c35a9a19741bf7fc"
        }
      ],
      "purl": "pkg:npm/jsbn@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsbn/-/jsbn-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a8fb4444155e7dfebcf781f24d2908819707c7692112975a5c1b200142c9e721f58e16de89363e600a883653a30b67ffc81980fe9c0f2723e9934a144445e68"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "smart-buffer",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7884ad0787cacfa90976c577371ec681a0e5ca576d0c4e83e4717bf06c84962c4b3eeb8b01ab9905827da42431dbd4faf2f72acfd1dc6b088f5145c8bb4572a"
        }
      ],
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/smart-buffer@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "8.17.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e97405bd74e46df50e64e28a20b146d4f0cad8d0d0b386b3290976e93d184b90b1a962e05da8db3d9fa1e2065e909c91a8553ca6f9db01b6ecff74e044fcbe19"
        }
      ],
      "purl": "pkg:npm/ws@8.17.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-8.17.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@8.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-8.17.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "ws,WebSocketServer,ws/WebSocketServer,Receiver,ws/Receiver,Sender,ws/Sender"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#64"
          },
          {
            "location": "src/tools/mcp/cdpRelay.ts#37"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yaml",
      "version": "2.8.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02f6da08b38ed8eb70fe55b96e687d77f58475c0c5750a766766541f7a57f54da2872518d27bcbbfb27a4eb5a8c2495118f61b07f22e20c7d88316823e0e41a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/yaml@2.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@2.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#70"
          },
          {
            "location": "src/utils/isomorphic/ariaSnapshot.ts#98"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "debug",
      "version": "4.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f40a27533c938d75e110e6b40e7aa9cd98ba54796a28cb3081af445e3a579e7ab1c0bb5dbcf3ed94ef1ebeb2390fd4ba6ac151090eaffb0a6250a6f0faf2aaca"
        }
      ],
      "purl": "pkg:npm/%40types/debug@4.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/debug/-/debug-4.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/debug@4.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/debug/-/debug-4.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "ms",
      "version": "0.7.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a25202b357d02e684919aa438b0c8be54222fa96db9977db46716de0c299d7f096ee8ae8459441a69855c45e4379d02beaeceb3cf08636bf47640ea5d859580"
        }
      ],
      "purl": "pkg:npm/%40types/ms@0.7.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/ms/-/ms-0.7.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/ms@0.7.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/ms/-/ms-0.7.31.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "diff",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "761542606bf76526f399068149a82bbf5589eab5c2764c93703ca836ed4c0fc268848ee947b93cc1d6449be9af77144a5f21d5c1c905cd6535bc973e676f4c94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/diff@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/diff/-/diff-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/diff@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/diff/-/diff-6.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "ini",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "308c8d5198a90536f250d9e1bee5c94d8ec1eaa348efc99e724f496efdf09343a037047238e544283bad0243acd6c9c1fedc7415a7f247afd23783ecd2164f7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/ini@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/ini/-/ini-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/ini@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/ini/-/ini-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mime",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26eb3db380836eac2871ce693809e1f1285fae731c3c7b8963355c49453b96b87c362e47b88a97de88a52fcea9ddd953ae4d0bcc7442800fc643bb8d0b0ea5d9"
        }
      ],
      "purl": "pkg:npm/%40types/mime@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mime/-/mime-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mime@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mime/-/mime-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimatch",
      "version": "3.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a5cfde3d874d86cf6b9908c1b00d44834b56019537430e06d61e2fbcd65dbdb5000b52dbf3e2b0188b9ba85611392da828aba0dea805256eb1ef5bf9970e075"
        }
      ],
      "purl": "pkg:npm/%40types/minimatch@3.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimatch@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/minimatch/-/minimatch-3.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "pngjs",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "277f678db756d54ffa632557bc2f7ed627e566084ff238117f69dd62085d25be712f8f4b60307ed44b80c5f6ee2762016d620bdc08c73d0860693c53dd86987a"
        }
      ],
      "purl": "pkg:npm/%40types/pngjs@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/pngjs/-/pngjs-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/pngjs@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/pngjs/-/pngjs-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "17.0.25",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c00364e9f06b5307696388ac8d6aca4ee7e4ad776ed43d981c2a2dd9f0ff0df5b1179b0cad5480f8a37bc9d724bda4c28741e2a97f48565d0be7f6685e0e4cef"
        }
      ],
      "purl": "pkg:npm/%40types/node@17.0.25",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-17.0.25.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@17.0.25",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-17.0.25.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "progress",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65861573f912324847f56ff874d2bfb0b36b6b772791f4f69c9c8e0080d8f82daeeb0ef6c1ad2cd5a5c07b356d6d3b2737c1c80f5ba15c2acbc03136657a6996"
        }
      ],
      "purl": "pkg:npm/%40types/progress@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/progress/-/progress-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/progress@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/progress/-/progress-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "proper-lockfile",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91de0b32f727a5892ca43729eeb99729e767f222520a86b7df5cd145a994a79a1a9cab7f09e7db1063d03fb1bcf5e9f3eec283e1bbecafc9874ac0bc8f958ebc"
        }
      ],
      "purl": "pkg:npm/%40types/proper-lockfile@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/proper-lockfile/-/proper-lockfile-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/proper-lockfile@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/proper-lockfile/-/proper-lockfile-4.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "retry",
      "version": "0.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c84918032764dce6ae1346abe026dcec464158349cd9ae14ddb4ca06541b6dc33cd02643e74b75964c573b92e0d1a0fb4f6a497e4fe39f7445236098fb25ba3"
        }
      ],
      "purl": "pkg:npm/%40types/retry@0.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/retry/-/retry-0.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/retry@0.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/retry/-/retry-0.12.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "proxy-from-env",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96e1bef93147c92eb578a71f911d42555e9ad4630d5c38eda8440821f6921dac7be71a741d4dd295ece33a2d72aae6c9c2b1bc7bd0de5b9f67eb04db9480f016"
        }
      ],
      "purl": "pkg:npm/%40types/proxy-from-env@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/proxy-from-env/-/proxy-from-env-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/proxy-from-env@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/proxy-from-env/-/proxy-from-env-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "stack-utils",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e5db5f7f053e5f2c06b3e8d0e44ae8736accb8f5dc104bf0d276ee0c76080507ccdc5efeef7e5048df1a7b1449a499d0e40542366cf50d78cb6da7692761dc7"
        }
      ],
      "purl": "pkg:npm/%40types/stack-utils@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/stack-utils@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "ws",
      "version": "8.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34e9f978872058b3a8eaa5bc01cb8b67b1bc3f2717bb4c53c71912e90d7c55617180f5123b0574a418f66bfe2f88d655bb6e62ed1201ec6b6d7640085145ce3a"
        }
      ],
      "purl": "pkg:npm/%40types/ws@8.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/ws/-/ws-8.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/ws@8.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/utils/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/ws/-/ws-8.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/utils/package-lock.json"
              }
            ],
            "concludedValue": "bundles/utils/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@modelcontextprotocol",
      "name": "sdk",
      "version": "1.28.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82696817e8be7e523ca2e40aecc596e263b0b8c87845e3c1b8f14010f0bafa976ac963943033a2c5beaa67af68c0b269cfa5e6ca5942a2e738b7c6163be13637"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40modelcontextprotocol/sdk@1.28.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.28.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@modelcontextprotocol/sdk@1.28.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.28.0.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "@modelcontextprotocol/sdk/client/index,@modelcontextprotocol/sdk/server/index,@modelcontextprotocol/sdk/client/sse,@modelcontextprotocol/sdk/server/sse,@modelcontextprotocol/sdk/client/stdio,@modelcontextprotocol/sdk/server/stdio,@modelcontextprotocol/sdk/server/streamableHttp,@modelcontextprotocol/sdk/client/streamableHttp,@modelcontextprotocol/sdk/types,CallToolRequestSchema,@modelcontextprotocol/sdk/types.js/CallToolRequestSchema,ListRootsRequestSchema,@modelcontextprotocol/sdk/types.js/ListRootsRequestSchema,ListToolsRequestSchema,@modelcontextprotocol/sdk/types.js/ListToolsRequestSchema,PingRequestSchema,@modelcontextprotocol/sdk/types.js/PingRequestSchema,ProgressNotificationSchema,@modelcontextprotocol/sdk/types.js/ProgressNotificationSchema,CallToolResult,@modelcontextprotocol/sdk/types.js/CallToolResult,CallToolRequest,@modelcontextprotocol/sdk/types.js/CallToolRequest,Tool,@modelcontextprotocol/sdk/types.js/Tool,Root,@modelcontextprotocol/sdk/types.js/Root"
        },
        {
          "name": "ImportedModules",
          "value": "@modelcontextprotocol/sdk/client/index.js,@modelcontextprotocol/sdk/server/index.js,Server,@modelcontextprotocol/sdk/server/index.js/Server,@modelcontextprotocol/sdk/client/sse.js,@modelcontextprotocol/sdk/server/sse.js,SSEServerTransport,@modelcontextprotocol/sdk/server/sse.js/SSEServerTransport,@modelcontextprotocol/sdk/client/stdio.js,@modelcontextprotocol/sdk/server/stdio.js,@modelcontextprotocol/sdk/server/streamableHttp.js,StreamableHTTPServerTransport,@modelcontextprotocol/sdk/server/streamableHttp.js/StreamableHTTPServerTransport,@modelcontextprotocol/sdk/client/streamableHttp.js,@modelcontextprotocol/sdk/types.js,CallToolResult,@modelcontextprotocol/sdk/types.js/CallToolResult,ImageContent,@modelcontextprotocol/sdk/types.js/ImageContent,TextContent,@modelcontextprotocol/sdk/types.js/TextContent,CallToolRequest,@modelcontextprotocol/sdk/types.js/CallToolRequest,Root,@modelcontextprotocol/sdk/types.js/Root,@modelcontextprotocol/sdk/shared/transport.js,Transport,@modelcontextprotocol/sdk/shared/transport.js/Transport"
        },
        {
          "name": "cdx:mcp:package",
          "value": "true"
        },
        {
          "name": "cdx:mcp:official",
          "value": "true"
        },
        {
          "name": "cdx:mcp:role",
          "value": "sdk"
        },
        {
          "name": "cdx:mcp:catalogSource",
          "value": "official-sdk"
        },
        {
          "name": "cdx:mcp:packageName",
          "value": "@modelcontextprotocol/sdk"
        }
      ],
      "tags": [
        "mcp",
        "mcp-sdk",
        "official-mcp-sdk",
        "trusted-source"
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#17"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#18"
          },
          {
            "location": "src/tools/mcp/index.ts#24"
          },
          {
            "location": "src/tools/utils/mcp/server.ts#27"
          },
          {
            "location": "src/tools/utils/mcp/server.ts#29"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#19"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#20"
          },
          {
            "location": "src/tools/utils/mcp/http.ts#29"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#21"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#22"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#23"
          },
          {
            "location": "src/tools/utils/mcp/http.ts#30"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#24"
          },
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#25"
          },
          {
            "location": "src/tools/backend/response.ts#25"
          },
          {
            "location": "src/tools/backend/tool.ts#23"
          },
          {
            "location": "src/tools/utils/mcp/server.ts#25"
          },
          {
            "location": "src/tools/utils/mcp/server.ts#28"
          },
          {
            "location": "src/tools/utils/mcp/server.ts#26"
          }
        ]
      }
    },
    {
      "group": "@hono",
      "name": "node-server",
      "version": "1.19.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76bf3fdf311a07ea740f69ff214ae53c5d47666e7ceaa8093572b56bd7e183f3f376d90aecab1de65df5dad257db206e00ba83601946db44046dacaa3f2c67fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40hono/node-server@1.19.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@hono/node-server@1.19.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hono",
      "version": "4.12.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8eaf65d43334cd522fb26de5bfd370f679499cc34f39c02db1bb20894856705ccf13df46be8eb245396ccd22cb61a70c790eaab870fa84c7c877c72b547bdec7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/hono@4.12.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hono/-/hono-4.12.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hono@4.12.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hono/-/hono-4.12.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "8.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e55cf78458c5cc67bb0f60e1ea983c8227371f36b52bddf18d2ad7b35f5e3291738422fc8af3577eab2771f3d298e4eef514a30f690daf05f04523934747adc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv@8.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-8.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-uri",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88f79e0ca25259fe0810e6ac555ae49d7a5a055d08029cff829ed2d9b6fb6782e58db976306251a889d9894ad0c15d7a729cf0fc3dd2e63e49ba58ff813e7600"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/fast-uri@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-uri@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/require-from-string@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-formats",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2252a979d04511fae51c7514371c3a9ae84572a3776870bf20e5627714d7169aeeb621b90652e7bfa44c8b056f1518a2ae7133e0a9e92ce1f214d43038ca8c1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ajv-formats@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-formats@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d38ea7dc045122a4a7570afe180d05827e670b64a9bcd65745d29028a53bf2ac51956dc47a3ff54001de46ecdfb4b53afc42a894d2d15a743e852b836d27038"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/content-type@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cors",
      "version": "2.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2881db2c9aaeef7446aff8676eb3bdb817a2c4d1aebd2423ba5fe3745bd2fca152207d615957759e0ef3387c7e62b11f2272c6eeae27e861d0f5c0edc6ffcfea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cors@2.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cors@2.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b95d903963f69d6ceccb668ca7c69189b862f5d9731791e0879487681f4e893184c834e2249cb1d2ecb9d505ddc966ed00736e6b85c9cd429c6b73b3294777bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventsource",
      "version": "3.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0914f5593cae4280fbef5196e7a5c464543f66849f5a27756a52860d832692ddb297c517ad5478a6ca6a58d11ca8abd523383a3c096d5a3c5c4923eb6e803888"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eventsource@3.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventsource@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventsource-parser",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d5a5991330cf6b17a010f603c9a45b0d00cb78f302330794d08224cb7478ae3bc5c40e152064486a2a56565db233a3d56627f1efcac1ea11a55e0f9bfd4cfbc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/eventsource-parser@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventsource-parser@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8484b889d5966a2ebd35ecc8751b76c455687da1788fee8834ea4995538b0cef335c6a54544573218935d94522d89ce313358bdc8380c5c4ee6e0cfd3e8d325f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/express@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-5.2.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5cbe0e82b4ac1f81d995a98d562225ca7374356e446a18b8bed96ffa6a8fba63b82efd10b046e021184ce1e41e0a96ccd2b932e0658baa16aa396c89a334a9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/accepts@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2db833764d21e23ba843d7c22975b86f2d1426a8fe9ce3ab23d309d6c4a3e2723c688d9ea35aa6bd01227b8543d6096c4b6e749f5e4bb16b18b42ba0892b52e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/mime-types@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.54.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "694e4426e20dd960de982700a76bc505fa7f9b810085626750d492c348b1b3bfe45db77a3e0eb8126c0990d745841f1a5add6c1f60935eb2f1a3f880195de83d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.54.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.54.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0e7ecfc051087c31a11cae5ab9c4e5f4090f72a53179765efc9a394c35f38ad3c7f3a604c741140f07170f944b48c34c91a70b3e668ff7afee5645bcbbbb71a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/negotiator@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0fe559004ca94dc1c82fc62d2f334a7f0f79f60b7111798557f83358b394e36459ffa10b768fee2c549b5232bd7ca5d46bf308d370197a2e857e154c333e634"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/body-parser@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/bytes@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "bytes"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/mcp/raw-body.ts#17"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "446c305a7c10be455f6af295b76d8518bc3ec5849dcc04709b4aeee83853540dee994e6165cdbc57790ee2cb6062bcab4e52e9baf808f468a28e5b408cd6dca8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "debug"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/zip/src/third_party/extract-zip.js#27"
          },
          {
            "location": "bundles/utils/src/utilsBundleImpl.ts#22"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e056d17405fe6d2766a3801416e4b458d88fcfc36016dfabf138603569a5ae3423b7543b651f7ecd395c7b6f39f71e0a497af022c69e4ea0e82909ad3fca4b99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/depd@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ef132e795770c1eee927468fb888e193e5f3f5b2547cc10a2155d9278a064f32932cb5a289416870898040089137525da94e70138a18416274616501c606247"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/statuses@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toidentifier",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toidentifier@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a6f438c40d0e79b3d7cbe04633380bf4c8caa6301499a7a1b456f1724cc3ca5b1892047523f4d5bfaaa2e65d4c17aeb33b02fa9295309fbea45bd1c33cc98ab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/on-finished@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "980653b4d09e7ad28c1fea528eb6fbe8d00cf15f5ad3923d68164e1f3b56cbf52a70975060db1fe7dbeb44a5a7a23013f58f866c8be84c10bef823c7aa90c185"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/qs@6.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.15.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "657f7d7bab51c1ea145ea47e541aec96175ae75361e4c4d0c28bb9b6750381bb723347418268440ed5863ffc5b2a7ea1a9f3d11ee8d4370cf97f2ff06db867a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/side-channel@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-errors",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-errors@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.13.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5baee22e5e09d845c41936df78709f7eb8c37e2b6f2c0360d14957df01545124f1f762974457a0307515812a84fb0be101b8b85aa8c683d733cac4d5d84a5b7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/object-inspect@1.13.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.13.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-list",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1422c7b510ff827a428821c48892cec1d9853fec330a60c491cf72ecdb18c5e178bbb06db27d59bb0830246c4898898789c240acb3f8474c97e1cd8a0ab32b4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/side-channel-list@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-list@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-map",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5428c235f80cb1bcb7b53768d369db8ed33f7b0adaea33c79a94e17a7913621f291bdb9c67fd4ff12a38bb814605e93f063a4e56c0c23282c0fe2b8128815744"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/side-channel-map@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bound",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb2b3df7b53dea9a382b1fc0069042aa103d12ec49690583420ef6f791f8841a61bf72198346e804abb0629b78617a7a319e4099942753fb72313951a5a49e8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bound@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a9d5a6e52748af0e44b38dc68977112e9cde7f5ef92c149dac30115fabac74af285057fd9bfcac057b6d5c329987b4f3928a3f0af7dff049fa04b9339b9ae31"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5f4a349aa2cfdf448548a7ec5226513a95fc21112ecb36d29a08121a987b23af69dad418800493e8d263a38f3f062435116ab9823c6a9a89583999f8dbf7c09"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-define-property",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b79d17e07d4678acd18bdb7da05205f4e90372c9ecf4e0a76316b17e2d34683979ab3a014a0e0e0109db235bc1274faf5ea9d606991a49c223d560dac2696de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-define-property@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-object-atoms",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "146807da1f3328d8a6f658e3edd6a79053dc20220af42a796e6f9cda041261e3e1a5a1b9f9eb2b2ce0e2848a2b9fe3dee85189cd6857428b4fbfbde34da95d5c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-object-atoms@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-proto",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1349f063a17069f3d26f20a21e7eac3b53608279bb1cef892263a6b0886a202ada1219b823604fc6ffe97db05dcc5853cd73d21ca0e0b83837ca1dfc459a9d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dunder-proto",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28837f9c3241411717c3430b561644f62407986ebca80548060f42aa65188e64088608a3f54e4c16faea9142f915bb72cb366e39e3add3375e45ee1463b72df8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dunder-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gopd",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65429187afe4505a0089302d4d83d9277870f70371c7e04804e8a39e51bd3e7ac9b027128ecd70cb20fabc9a5a62d827cc3aca6114aa7f738ee917daf77c6c46"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gopd@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5c0cd77027625aa2199bdec8383a629a301c2e0b8f2c6278b91d4c360efb02f0b8c64cb2bd87e79bd57e91cae3877b8853d142c25baf22a26863528294aa53d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hasown",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d21254f5208fbe633320175916a34f5d66ba76a87b59d1f470823dcbe0b24bcac6de72f8f01725adaf4798a8555541f23d6347e58ef10f0001edb7e04a391431"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/hasown@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasown@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc85ed6f0124e474cfc84c32297ea11a4617c4cf676e3eb807e8a55499c2fd1e81d291f91b85776f4a556cbec3063e2d921040a696d05257fa17a5e5f4b1eed6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/math-intrinsics@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel-weakmap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58f4bf1ef1d04d89c78ac2e8f4c72a0473899361641cefed969be5772ae77a6e1a790a7885a8b7832b61b3083aa74d684a84e5e7cadca621408c5d9baf6024d8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b9cd08c3965c5691fed9e7125d574fc1d164cdab1eafc46ef4cc9138374901b382e8be6118589cd01b10bd6d2f5100abb76e0338d25adde73a0b275d8c43904"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/raw-body@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "399b3a82c8c5e2f329df6aab09b8954a4ac5997b46fc0661637b7488032b30188067257da002ed5cef21b2b1db31717dc7a2f782b945bb05b6a00cfb71abfe1b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/type-is@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a2b27ac33f818d7b4e9470a1675796df30d3c1530e23b0b19a5b059f9c7defd361a706e5d7d8c0959f945bad6a348f7a5ccd48a561b96aedf43b370dade572b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/media-typer@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a085c848cca7a92aa6db8d64ea4710e54c2db4320b30ae018aeac27c6111130ebe5fd8e492911ee53f4565a029c8b1863a716ec8c599a5da254d732dbc4274f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/content-disposition@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca48b95e72ae7fbe74979d2e193965b7a90a20b6389d0d5e34841ab685c40726797568272aa6e7aa64eb044e41e0dee5acc24a436cad58c8933b6a34bfa130ff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cookie@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fbeae53bdee9525eb0f5517178284d93331555c21b270a07c0c9383d93c3fa2866639572ab38b7b874940a2370718b9c237ac6681572561253560633d931b86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4349fd1d18b89ba26e188575785966bc907b644571bbddc8accca232c182d25acc24c5b3460c7a586aaec9f4206556f7d6f8468179df98f34d5e6c673a4441ae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/encodeurl@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4bc2a866045937e6b9acdc2a4f195965e3e34ffe1c9e6d11395ef42de7511d9d29f2ef5f4480f484951942990a2f3ae8f0b7e60bcb31db76d8ead54dc6ff2940"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/finalhandler@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "471fd6c9c67ad0739aa8b2808ba70744a288ef3c566c9df53219ed9adc0ca1a4de17b5c51fd861069f2f21368c89d7e58d143a7985822a46932beca45491cfd8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fresh@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a7937d785796b214b869ddf914444b9be96b6305f3dd08f6352e7f3ff26ba7b8bba2621b000600555aca33006f8c58c6d512f71d7296e2f51ef0c36da5f50de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/merge-descriptors@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96542c30b4940d43d3e388ddad4fcedfbaa59e27e2b433fe670ae699972848ac8b2afb59c69c95d27dbf6c3fcde2d040019fe024475953b28cadaa0ad7e5d802"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/forwarded@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "router",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cb4eb50a9b653288beeb9616a9bbf665e3917036091919a0a965b2076a30d883094908eccb4a4f9c20f027b04a95f79e468c82c99ca6dd402d6754fcfe80061"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/router@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/router/-/router-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/router@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/router/-/router-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86fa6823a928ae124c9de8f6f3975283a9eed7e7babb1b3bcc6dc16009b96f2a83b2024d5b0c7333acfa8998808104784c9df42660533b0a99530dd69721f701"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/is-promise@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "8.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ee377054846db0ff0c6297574b0392d18743d03bbea8ea05fc010f22df3c3dc085ad90b3c78d68c64bb58c3f3c8590706cd50811fa6abee86315a300a8c4d69c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-to-regexp@8.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@8.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d609d97fb0c572821c6a34e34f08f0b838f3bb3e0f3dc6364ad28f96c180435f981f6d08455ac169749699d8e8c1327abbc45cd353e860e1875df3f599871935"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/send@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c515c19f4a4fa904d54220bcc3242b2acd8c3a55f6e334343ce19a8f492e96dbe8382b2d050339caf3a1015494c0e32342d4efb0f5a83421df3c6c1a6902614f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/serve-static@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express-rate-limit",
      "version": "8.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f574a37e726c8f5aebc1f86d92444403ccf6356a0a4121c4daf6c27138f30235e1f7830ce1a894435825d6de0834cbfffe2d0ffc8f9d896cc44e5b2aca74c77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/express-rate-limit@8.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.3.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express-rate-limit@8.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "ip-address",
      "version": "10.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d70031f15e6bd3f7e091c615e0e7a2c9a2f13e6e65a711607bf0b07cdd5653a6b29399a0b941faee5e8731cd36762a5d033702ae05d9488632fc2de63c49ff1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/ip-address@10.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip-address@10.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jose",
      "version": "6.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d13a5a4df8a177840c370af3fe86f6069ed7d38caec499234468b868a98eab0868bf9e22eaeefda02bfb4fe0bb968ef430a1fa05eb08defb1c0f5c9bff2cca5d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/jose@6.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jose/-/jose-6.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jose@6.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jose/-/jose-6.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-typed",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d08685dd72f737576f31ec2ec132ce0fe7e90d96051445eda39944f54fffe8051303aeacb540f7a52629b0646a3b1e0f553d5dc4415e419eae216c5cb6bdeb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:npm/json-schema-typed@8.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-8.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-typed@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-8.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkce-challenge",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9e18b7e5aeb9efc01df1ba8fee1a86f9a5de4537b97432c2dfd19f3ba3f510991b708ef7f295f73d32eac8c51016cb00984e0aefa5705caa357839f09818221"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/pkce-challenge@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkce-challenge@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zod-to-json-schema",
      "version": "3.25.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4cfd253d777600820ce2e8cb51e21eebbae425a8ab5a77c7bd4b47e6c5c322fae7802b92a8af2b3f696715f4b2081d355b8f4d4d773c5c9d748df8eef864854"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/zod-to-json-schema@3.25.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zod-to-json-schema/-/zod-to-json-schema-3.25.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zod-to-json-schema@3.25.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bundles/mcp/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zod-to-json-schema/-/zod-to-json-schema-3.25.1.tgz"
        },
        {
          "name": "ExportedModules",
          "value": "zod-to-json-schema"
        },
        {
          "name": "ImportedModules",
          "value": "zod-to-json-schema"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bundles/mcp/package-lock.json"
              }
            ],
            "concludedValue": "bundles/mcp/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "bundles/mcp/src/mcpBundleImpl.ts#26"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/zod@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zod-bundle@0.0.1",
      "dependsOn": [
        "pkg:npm/zod@4.3.6"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.4.0",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.4",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pump@3.0.2",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@5.2.0",
      "dependsOn": [
        "pkg:npm/pump@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/buffer-crc32@0.2.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pend@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yauzl@3.2.1",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.13",
        "pkg:npm/pend@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yazl@2.5.1",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.13"
      ]
    },
    {
      "ref": "pkg:npm/@types/node@17.0.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/yauzl@2.10.3",
      "dependsOn": [
        "pkg:npm/@types/node@17.0.24"
      ]
    },
    {
      "ref": "pkg:npm/@types/yazl@2.4.2",
      "dependsOn": [
        "pkg:npm/@types/node@17.0.24"
      ]
    },
    {
      "ref": "pkg:npm/zip-bundle@0.0.1",
      "dependsOn": [
        "pkg:npm/@types/yauzl@2.10.3",
        "pkg:npm/@types/yazl@2.4.2",
        "pkg:npm/debug@4.4.0",
        "pkg:npm/get-stream@5.2.0",
        "pkg:npm/yauzl@3.2.1",
        "pkg:npm/yazl@2.5.1"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@13.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.3.4",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/diff@8.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dotenv@16.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/agent-base@7.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/https-proxy-agent@7.0.6",
      "dependsOn": [
        "pkg:npm/agent-base@7.1.4",
        "pkg:npm/debug@4.3.4"
      ]
    },
    {
      "ref": "pkg:npm/ini@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jpeg-js@0.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.12",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.12"
      ]
    },
    {
      "ref": "pkg:npm/define-lazy-prop@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-docker@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-wsl@2.2.0",
      "dependsOn": [
        "pkg:npm/is-docker@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/open@8.4.0",
      "dependsOn": [
        "pkg:npm/define-lazy-prop@2.0.0",
        "pkg:npm/is-docker@2.2.1",
        "pkg:npm/is-wsl@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/pngjs@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/progress@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-from-env@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/retry@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsbn@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sprintf-js@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ip-address@9.0.5",
      "dependsOn": [
        "pkg:npm/jsbn@1.1.0",
        "pkg:npm/sprintf-js@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/smart-buffer@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socks@2.8.3",
      "dependsOn": [
        "pkg:npm/ip-address@9.0.5",
        "pkg:npm/smart-buffer@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/socks-proxy-agent@8.0.5",
      "dependsOn": [
        "pkg:npm/agent-base@7.1.4",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/socks@2.8.3"
      ]
    },
    {
      "ref": "pkg:npm/ws@8.17.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yaml@2.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/ms@0.7.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/debug@4.1.7",
      "dependsOn": [
        "pkg:npm/@types/ms@0.7.31"
      ]
    },
    {
      "ref": "pkg:npm/@types/diff@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/ini@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/mime@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/minimatch@3.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@17.0.25",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/pngjs@6.0.1",
      "dependsOn": [
        "pkg:npm/@types/node@17.0.25"
      ]
    },
    {
      "ref": "pkg:npm/@types/progress@2.0.5",
      "dependsOn": [
        "pkg:npm/@types/node@17.0.25"
      ]
    },
    {
      "ref": "pkg:npm/@types/retry@0.12.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/proper-lockfile@4.1.2",
      "dependsOn": [
        "pkg:npm/@types/retry@0.12.2"
      ]
    },
    {
      "ref": "pkg:npm/@types/proxy-from-env@1.0.1",
      "dependsOn": [
        "pkg:npm/@types/node@17.0.25"
      ]
    },
    {
      "ref": "pkg:npm/@types/stack-utils@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/ws@8.2.2",
      "dependsOn": [
        "pkg:npm/@types/node@17.0.25"
      ]
    },
    {
      "ref": "pkg:npm/utils-bundle@0.0.1",
      "dependsOn": [
        "pkg:npm/@types/debug@4.1.7",
        "pkg:npm/@types/diff@6.0.0",
        "pkg:npm/@types/ini@4.1.1",
        "pkg:npm/@types/mime@2.0.3",
        "pkg:npm/@types/minimatch@3.0.5",
        "pkg:npm/@types/pngjs@6.0.1",
        "pkg:npm/@types/progress@2.0.5",
        "pkg:npm/@types/proper-lockfile@4.1.2",
        "pkg:npm/@types/proxy-from-env@1.0.1",
        "pkg:npm/@types/stack-utils@2.0.1",
        "pkg:npm/@types/ws@8.2.2",
        "pkg:npm/colors@1.4.0",
        "pkg:npm/commander@13.1.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/diff@8.0.4",
        "pkg:npm/dotenv@16.4.5",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/https-proxy-agent@7.0.6",
        "pkg:npm/ini@6.0.0",
        "pkg:npm/jpeg-js@0.4.4",
        "pkg:npm/mime@3.0.0",
        "pkg:npm/minimatch@3.1.4",
        "pkg:npm/open@8.4.0",
        "pkg:npm/pngjs@6.0.0",
        "pkg:npm/progress@2.0.3",
        "pkg:npm/proxy-from-env@2.0.0",
        "pkg:npm/retry@0.12.0",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/socks-proxy-agent@8.0.5",
        "pkg:npm/ws@8.17.1",
        "pkg:npm/yaml@2.8.3"
      ]
    },
    {
      "ref": "pkg:npm/hono@4.12.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@hono/node-server@1.19.11",
      "dependsOn": [
        "pkg:npm/hono@4.12.7"
      ]
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-uri@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-from-string@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@8.18.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-uri@3.1.0",
        "pkg:npm/json-schema-traverse@1.0.0",
        "pkg:npm/require-from-string@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/ajv-formats@3.0.1",
      "dependsOn": [
        "pkg:npm/ajv@8.18.0"
      ]
    },
    {
      "ref": "pkg:npm/content-type@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cors@2.8.5",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.6",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/eventsource-parser@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eventsource@3.0.7",
      "dependsOn": [
        "pkg:npm/eventsource-parser@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.54.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@3.0.2",
      "dependsOn": [
        "pkg:npm/mime-db@1.54.0"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@2.0.0",
      "dependsOn": [
        "pkg:npm/mime-types@3.0.2",
        "pkg:npm/negotiator@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bytes@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.4.3",
      "dependsOn": [
        "pkg:npm/ms@2.1.3"
      ]
    },
    {
      "ref": "pkg:npm/depd@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toidentifier@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@2.0.1",
      "dependsOn": [
        "pkg:npm/depd@2.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.2",
        "pkg:npm/toidentifier@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.7.2",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.4.1",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es-errors@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-inspect@1.13.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel-list@1.0.0",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/function-bind@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/es-define-property@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-object-atoms@1.1.1",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/gopd@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dunder-proto@1.0.1",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/gopd@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/get-proto@1.0.1",
      "dependsOn": [
        "pkg:npm/dunder-proto@1.0.1",
        "pkg:npm/es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hasown@2.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/math-intrinsics@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.3.0",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/es-define-property@1.0.1",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/es-object-atoms@1.1.1",
        "pkg:npm/function-bind@1.1.2",
        "pkg:npm/get-proto@1.0.1",
        "pkg:npm/gopd@1.2.0",
        "pkg:npm/has-symbols@1.1.0",
        "pkg:npm/hasown@2.0.2",
        "pkg:npm/math-intrinsics@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/call-bound@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind-apply-helpers@1.0.2",
        "pkg:npm/get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/side-channel-map@1.0.1",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "dependsOn": [
        "pkg:npm/call-bound@1.0.4",
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/get-intrinsic@1.3.0",
        "pkg:npm/object-inspect@1.13.4",
        "pkg:npm/side-channel-map@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/side-channel@1.1.0",
      "dependsOn": [
        "pkg:npm/es-errors@1.3.0",
        "pkg:npm/object-inspect@1.13.4",
        "pkg:npm/side-channel-list@1.0.0",
        "pkg:npm/side-channel-map@1.0.1",
        "pkg:npm/side-channel-weakmap@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.15.0",
      "dependsOn": [
        "pkg:npm/side-channel@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@3.0.2",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/iconv-lite@0.7.2",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@2.0.1",
      "dependsOn": [
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/media-typer@1.1.0",
        "pkg:npm/mime-types@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@2.2.2",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/debug@4.4.3",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/iconv-lite@0.7.2",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/qs@6.15.0",
        "pkg:npm/raw-body@3.0.2",
        "pkg:npm/type-is@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/content-disposition@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.7.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@2.1.1",
      "dependsOn": [
        "pkg:npm/debug@4.4.3",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/statuses@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fresh@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.7",
      "dependsOn": [
        "pkg:npm/forwarded@0.2.0",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-promise@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@8.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/router@2.2.0",
      "dependsOn": [
        "pkg:npm/debug@4.4.3",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/is-promise@4.0.0",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/path-to-regexp@8.3.0"
      ]
    },
    {
      "ref": "pkg:npm/send@1.2.1",
      "dependsOn": [
        "pkg:npm/debug@4.4.3",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@2.0.0",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/mime-types@3.0.2",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/statuses@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@2.2.1",
      "dependsOn": [
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/send@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/express@5.2.1",
      "dependsOn": [
        "pkg:npm/accepts@2.0.0",
        "pkg:npm/body-parser@2.2.2",
        "pkg:npm/content-disposition@1.0.1",
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/cookie-signature@1.2.2",
        "pkg:npm/cookie@0.7.2",
        "pkg:npm/debug@4.4.3",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/encodeurl@2.0.0",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@2.1.1",
        "pkg:npm/fresh@2.0.0",
        "pkg:npm/http-errors@2.0.1",
        "pkg:npm/merge-descriptors@2.0.0",
        "pkg:npm/mime-types@3.0.2",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/once@1.4.0",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/proxy-addr@2.0.7",
        "pkg:npm/qs@6.15.0",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/router@2.2.0",
        "pkg:npm/send@1.2.1",
        "pkg:npm/serve-static@2.2.1",
        "pkg:npm/statuses@2.0.2",
        "pkg:npm/type-is@2.0.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ip-address@10.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express-rate-limit@8.3.1",
      "dependsOn": [
        "pkg:npm/express@5.2.1",
        "pkg:npm/ip-address@10.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jose@6.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-typed@8.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkce-challenge@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zod-to-json-schema@3.25.1",
      "dependsOn": [
        "pkg:npm/zod@4.3.6"
      ]
    },
    {
      "ref": "pkg:npm/@modelcontextprotocol/sdk@1.28.0",
      "dependsOn": [
        "pkg:npm/@hono/node-server@1.19.11",
        "pkg:npm/ajv-formats@3.0.1",
        "pkg:npm/ajv@8.18.0",
        "pkg:npm/content-type@1.0.5",
        "pkg:npm/cors@2.8.5",
        "pkg:npm/cross-spawn@7.0.6",
        "pkg:npm/eventsource-parser@3.0.3",
        "pkg:npm/eventsource@3.0.7",
        "pkg:npm/express-rate-limit@8.3.1",
        "pkg:npm/express@5.2.1",
        "pkg:npm/hono@4.12.7",
        "pkg:npm/jose@6.1.3",
        "pkg:npm/json-schema-typed@8.0.2",
        "pkg:npm/pkce-challenge@5.0.0",
        "pkg:npm/raw-body@3.0.2",
        "pkg:npm/zod-to-json-schema@3.25.1",
        "pkg:npm/zod@4.3.6"
      ]
    },
    {
      "ref": "pkg:npm/mcp-bundle@0.0.1",
      "dependsOn": [
        "pkg:npm/@modelcontextprotocol/sdk@1.28.0",
        "pkg:npm/zod-to-json-schema@3.25.1",
        "pkg:npm/zod@4.3.6"
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "urn:service:mcp:response-mcp-server:latest",
      "description": "",
      "endpoints": [],
      "group": "mcp",
      "name": "response-mcp-server",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/tools/backend/response.ts"
        },
        {
          "name": "cdx:mcp:serviceType",
          "value": "endpoint"
        },
        {
          "name": "cdx:mcp:inventorySource",
          "value": "source-code-analysis"
        },
        {
          "name": "cdx:mcp:usageConfidence",
          "value": "low"
        },
        {
          "name": "cdx:mcp:exposureType",
          "value": "code-only"
        },
        {
          "name": "cdx:mcp:officialSdk",
          "value": "true"
        },
        {
          "name": "cdx:mcp:sdkImports",
          "value": "@modelcontextprotocol/sdk/types.js"
        },
        {
          "name": "cdx:mcp:usageSignals",
          "value": "mcp-sdk-import"
        },
        {
          "name": "cdx:mcp:toolCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:promptCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:resourceCount",
          "value": "0"
        }
      ],
      "version": "latest"
    },
    {
      "bom-ref": "urn:service:mcp:index-mcp-server:latest",
      "description": "",
      "endpoints": [],
      "group": "mcp",
      "name": "index-mcp-server",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/tools/mcp/index.ts"
        },
        {
          "name": "cdx:mcp:serviceType",
          "value": "endpoint"
        },
        {
          "name": "cdx:mcp:inventorySource",
          "value": "source-code-analysis"
        },
        {
          "name": "cdx:mcp:usageConfidence",
          "value": "low"
        },
        {
          "name": "cdx:mcp:exposureType",
          "value": "code-only"
        },
        {
          "name": "cdx:mcp:officialSdk",
          "value": "true"
        },
        {
          "name": "cdx:mcp:sdkImports",
          "value": "@modelcontextprotocol/sdk/server/index.js"
        },
        {
          "name": "cdx:mcp:usageSignals",
          "value": "mcp-sdk-import"
        },
        {
          "name": "cdx:mcp:toolCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:promptCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:resourceCount",
          "value": "0"
        }
      ],
      "version": "latest"
    },
    {
      "bom-ref": "urn:service:mcp:http-mcp-server:latest",
      "description": "",
      "endpoints": [],
      "group": "mcp",
      "name": "http-mcp-server",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/tools/utils/mcp/http.ts"
        },
        {
          "name": "cdx:mcp:serviceType",
          "value": "client"
        },
        {
          "name": "cdx:mcp:inventorySource",
          "value": "source-code-analysis"
        },
        {
          "name": "cdx:mcp:usageConfidence",
          "value": "low"
        },
        {
          "name": "cdx:mcp:exposureType",
          "value": "code-only"
        },
        {
          "name": "cdx:mcp:officialSdk",
          "value": "true"
        },
        {
          "name": "cdx:mcp:sdkImports",
          "value": "@modelcontextprotocol/sdk/server/sse.js,@modelcontextprotocol/sdk/server/streamableHttp.js"
        },
        {
          "name": "cdx:mcp:usageSignals",
          "value": "client-connect,mcp-sdk-import"
        },
        {
          "name": "cdx:mcp:toolCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:promptCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:resourceCount",
          "value": "0"
        }
      ],
      "version": "latest"
    },
    {
      "bom-ref": "urn:service:mcp:server-mcp-server:latest",
      "description": "",
      "endpoints": [],
      "group": "mcp",
      "name": "server-mcp-server",
      "properties": [
        {
          "name": "SrcFile",
          "value": "src/tools/utils/mcp/server.ts"
        },
        {
          "name": "cdx:mcp:serviceType",
          "value": "client"
        },
        {
          "name": "cdx:mcp:inventorySource",
          "value": "source-code-analysis"
        },
        {
          "name": "cdx:mcp:usageConfidence",
          "value": "low"
        },
        {
          "name": "cdx:mcp:exposureType",
          "value": "code-only"
        },
        {
          "name": "cdx:mcp:officialSdk",
          "value": "true"
        },
        {
          "name": "cdx:mcp:sdkImports",
          "value": "@modelcontextprotocol/sdk/server/index.js,@modelcontextprotocol/sdk/shared/transport.js,@modelcontextprotocol/sdk/types.js"
        },
        {
          "name": "cdx:mcp:usageSignals",
          "value": "client-callTool,client-connect,mcp-sdk-import"
        },
        {
          "name": "cdx:mcp:toolCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:promptCount",
          "value": "0"
        },
        {
          "name": "cdx:mcp:resourceCount",
          "value": "0"
        }
      ],
      "version": "latest"
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/zod-bundle@0.0.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-31T02:04:35Z",
      "text": "This Software-as-a-Service BOM (SaaSBOM) document was created on Friday, July 31, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'zod-bundle' with version '0.0.1'. The application also has 3 child modules/components. There are 149 components. The package type in this SaaSBOM is npm with 3 purl namespaces described under components. The components were identified from 4 source files. 4 are described in this SaaSBOM under services."
    }
  ]
}