{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:49f253cb-1cef-4783-bd34-6d1aec2fe922",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-28T16:35:17Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "base",
      "group": "@scure",
      "version": "1.2.6",
      "description": "Secure, audited & 0-dep implementation of base64, bech32, base58, base32 & base16",
      "purl": "pkg:npm/%40scure/base@1.2.6",
      "bom-ref": "pkg:npm/@scure/base@1.2.6",
      "author": "Paul Miller (https://paulmillr.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "bench, build, build:release, lint, format, test, test:bun, test:deno"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "build",
          "version": "1.0.0",
          "purl": "pkg:npm/build@1.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/build@1.0.0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "website",
          "url": "https://paulmillr.com/noble/#scure"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/paulmillr/scure-base.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@esbuild\\n@noble\\n@paulmillr\\n@scure\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json\\ntest/build/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@noble",
      "name": "hashes",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c2b3d95d77b370ce98170c87fa3f7f8dac787dfec0fa0907711f28d023e87feab0cda3cf32a41c71cf8e540ee647cfdaf7b4dcfb37f5489d256855db57108e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40noble/hashes@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@noble/hashes@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@noble/hashes"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@paulmillr",
      "name": "jsbt",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7667bf31c0f8cdd638d8e001e468b586b9293820b4062766c4cf4333189e9b62f9797451d031947c8ab5bb332cfec6949bb124fb778ca48cb3cf6a0848d9aa6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40paulmillr/jsbt@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@paulmillr/jsbt/-/jsbt-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@paulmillr/jsbt@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@paulmillr/jsbt/-/jsbt-0.3.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@paulmillr/jsbt"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "22.15.23",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec4735cda14f178449d1e5eed584ffc6089e6eac2aa09cfcad83c38bf3b605c67ef96a6dd0aabd725d1e83a34de9b61b3e747aed92e8ed2b7943750ad129c047"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@22.15.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-22.15.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@22.15.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-22.15.23.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici-types",
      "version": "6.21.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b00d9aa0d10006ae0f516afe47e27d0ceb87379a4479f5c27ac10a7eec2e2723482c984c5a79d6982cd3b8e1e4f802d041c236d38863cc96dd8c7744fd1fd25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/undici-types@6.21.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici-types@6.21.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/undici-types"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-check",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3ec9061e358a817d67a6d0d9a6ec1527876ef09beab01af234c659fad1cf113cce6b55e93165ffc895d9e0d863417e3686eaeb4879b1665413e536d66504bc6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-check@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-check/-/fast-check-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-check@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-check/-/fast-check-4.1.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/fast-check"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pure-rand",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1351933f340652f29ec0351dd21e1df491707eccadabd813dc127fdac0921b3afabcd96a0c378a7ad80596a771e1c39d06d3132cc359a12012ea1f0eb811c35"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/pure-rand@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pure-rand/-/pure-rand-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pure-rand@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pure-rand/-/pure-rand-7.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/pure-rand"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micro-bmark",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0cd7a6318fa175b74649a024fbc661ee3370169b677835a7c065a989155fbe6430fcb8cb51324ecdb2adb72e31c24b2db8e80a8804e2c319f788a090698a9be"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/micro-bmark@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micro-bmark/-/micro-bmark-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micro-bmark@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micro-bmark/-/micro-bmark-0.4.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/micro-bmark"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micro-should",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de012e4f344e13ce7aa594a28cc0f93689c8ad04c418b76430a8f8d92d890aaa5789aa907684aa11dfe64e89de9404f464dc21798ee903fc3a780a2d4135de59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/micro-should@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micro-should/-/micro-should-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micro-should@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micro-should/-/micro-should-0.5.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/micro-should"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "3.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "410b5ac67a0325e0240ef0ca5822e2c085e44e0461c180c440282153d67aab4de2c9e93faf1461ff6942dc707b3fcb164f6c42ff2e490dcb4f2c1206cc729b87"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/prettier@3.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier/-/prettier-3.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier/-/prettier-3.5.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/prettier"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "5.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a757625ba4ea2fd2f4ee7371bd130cee130cc387395cea3fd626cbe1a0081a6480b7db254c4d57830e4a5aea1fdae4cebc283d058ed9462f86685fbbb1f80f79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-5.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-5.8.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/typescript"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@scure",
      "name": "base",
      "version": "1.2.6",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40scure/base@1.2.6",
      "type": "library",
      "bom-ref": "pkg:npm/@scure/base@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "../.."
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@scure/base"
        },
        {
          "name": "cdx:npm:isLink",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:../.."
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "057ab99aa73c96d6da377e1c0ea5ae60ac8d857f03fd9d09d7176d750f14708208c89cb3f9930a52de7cb45dd2ad9f398dc7cdfcf658863479b8340060d55bbb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/esbuild@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild/-/esbuild-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild/-/esbuild-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/esbuild"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "aix-ppc64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bbbee9fd49ff031631f652da8af0abb72e4aae2fd4992fc38b6354f9359900df8fb01b739017b725e1097cbdd37333a7f305b61f2da8912c8399fb614e0a005"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/aix-ppc64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/aix-ppc64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/aix-ppc64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d3c96098622534fb57892a6c36d655ad0be774f090d93d0e60fa4172c4fd15f9eb3a54f3d252133ace4f22226a768db57a1b08d7e296a9d0915b51037ae57d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/android-arm"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-arm64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82bbeff169dc1a30d2c9406337dc875cdb7e72ad2c9f15db0f1cb9a49b7330a1a69a93f1780980856c5723ed35954e6bc19a260e00f7909c2e9449e14d151dea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-arm64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-arm64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/android-arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "android-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bf8b1ed27ca1b96ee0a7c5ab2be76f8b23bf1243ec20744362f42ab2097c23551d97e09933f81a42de57b702804f6130bd347925c278155ef6c9f7f02486b7e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/android-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/android-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/android-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-arm64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "995c1d51be524643dac9569d20e23bf0aeda0273da9a87854766d3e67b3315467d3fc5292b8adab4e7586d9657612a8f28c1df4b5c1d1c2264d4fd4466945dbf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-arm64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-arm64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/darwin-arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "darwin-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e00da62c3d61534b84b79d6a4570c9ffdf7659c0001e00528d1cd6b540dd2b238a548e0a9fd1fece3665dfe9ddb6b6a4d8f87f4535d81e6806be6081549f646"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/darwin-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/darwin-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/darwin-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-arm64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54de28731cba77179f37531ea41c7f883d5d1f92bca8db4d7b6dbb2349a74d18ebcbcb63e4c464e33a6b2c4746f163f200f6fddff7b8a52822d52a0776039ae3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-arm64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/freebsd-arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "freebsd-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ab4a0b7b942874ec563e8430f54f1893c881f2b6d9fabe78deb273e85433660df3a68204cb5d1bfc21de5f3597b2d6097f57677254ad555d7a95b10222024f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/freebsd-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/freebsd-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/freebsd-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be40772188f6203a3783dc57ec7aa13d8c5590d41ef2a4cae797eb690c93cd35ff7f1683b578849dabeff6078eb289e1d8577644c07e8b971b86edb330d589c2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-arm"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-arm64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f500108d358d0ccfd59366e0065d7bc96b99c59350205d0e514b8f6512a80eda85da4e04b586e9ca21b9fc393b9ea78aea420958f62576439c06a8d78eb5259a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-arm64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-arm64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ia32",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e37113e5b1dba6105e8327aa2dbec8d5e627d8ffc9606366cf376276aff0d13f04d92b182f553aba7d8d151385460d4964b4f3742a11a2683c46f7fd33a5ba1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ia32@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ia32@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-ia32"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-loong64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c2f7973fc72345b9e3210a5c4999e4488f6cab48c7437e6a899f2398e19aac00b903aeb2897c8839353312cd506be585b58dffa5eff7277417cfdcc483a681f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-loong64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-loong64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-loong64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-mips64el",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e400c163bbb2835bbdd3d43747ee095cc88a6d9bde5aecb7bc8ab4d034efeab64a32ca96409e3721420a281540d084d032e22bb4f0defd5b84f8a4c07084fc1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-mips64el@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-mips64el@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-mips64el"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-ppc64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "361c8e7a37614464bc230bfe28a476cd3ab63e9cac17d5ea63e664efbbd01ea35ba3f3f0642cc1e7f87b546b911199b57e2c61b3843fa964528b9ce60223b817"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-ppc64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-ppc64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-ppc64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-riscv64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e52feb6cfe4e63e1872c2e6a5e9d72fccc7ffdef762f5603aa48816cef5340ebee15733e883a94346e57a290275e8447dc58c850391e19c63572036f9d7a7f90"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-riscv64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-riscv64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-riscv64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-s390x",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ccd8116c101cf4170dfb574cd4e025df71fb8008cae9a6c30529d618d96b934b7ca2f0ed6714e86297fc61293984d673e6572bd0263262be00d3fb187ca5724"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-s390x@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-s390x@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-s390x"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "linux-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7297dd6b1f0fdca70302372b540f1c23d978c5a7130bd32f4700e1fda4d5500e942b0711f2d350f1faf68cbb437508a6bf473043da1078bbffe77dcf927770b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/linux-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/linux-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/linux-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "netbsd-arm64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46e1b83d230f15fae41fa530080a81cdab81593ca04ef6f59f159ab04268a06489fcdc11c3b6f61cec3245340853dec7ab7ee5de7a57a19198332ddbdf162f3f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/netbsd-arm64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/netbsd-arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "netbsd-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e5faa8ac481e63934d4de5feec3c2b0110d08e94f892ff1a6d0f9cb13b1da8a907f2a2eac9c0828b440db2a967627e3de8c106422f6b27ea8d3c741cd9190cc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/netbsd-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/netbsd-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/netbsd-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openbsd-arm64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db5b1435bab6afce1813e4890df69046f760ce74c3f17734a1cde9de25bf6b511559e363fd275409b9b95348ad64f41846e4535b6d1f3cc58ca5cadc887d8427"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openbsd-arm64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/openbsd-arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "openbsd-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da0c30ae248c3dc0854653e52b1df32d085f37fd968c9d8d4a58394ca2d0389755d264b121c60d4cc864dc7dee94bfdc6a4f978f4958d589bdcac0d5d6281c7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/openbsd-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/openbsd-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/openbsd-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "sunos-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f123b4e180bccfacfcf8f38fd2f632e5bd400760ccf2e88d17894d5931e004381712d1578f045c61d498d342ddd789ab796fa3a1e31ed40bb23029028825122"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/sunos-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/sunos-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/sunos-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-arm64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65401cd982ba256f3dc536d7bdfb71767632de6e221c8903b4adc22dc7bcc20f0cd8bf9866122f3b50caa71addd18af9f4078d3644e289cf582dfe854ed5d633"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-arm64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-arm64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/win32-arm64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-ia32",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79237121206ef17c1e544586df5fc9ce390819b18824dfd3ad1a2249567067aa640ba557e089bf595d9ccf9e7dfd35cb7186dcac337c26d2a077d0c9548a3c18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-ia32@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-ia32@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/win32-ia32"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@esbuild",
      "name": "win32-x64",
      "version": "0.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6443681c9071036d02db317387a008e1f4fa46b68cce3630e312967a6453466455b4df5ce43707f6bfdfda284490c8ce5b978682bc02b251bff98ff76cbf831d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40esbuild/win32-x64@0.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@esbuild/win32-x64@0.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/build/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.25.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@esbuild/win32-x64"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/build/package-lock.json"
              }
            ],
            "concludedValue": "test/build/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@noble/hashes@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@paulmillr/jsbt@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/undici-types@6.21.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@22.15.23",
      "dependsOn": [
        "pkg:npm/undici-types@6.21.0"
      ]
    },
    {
      "ref": "pkg:npm/pure-rand@7.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-check@4.1.1",
      "dependsOn": [
        "pkg:npm/pure-rand@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/micro-bmark@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/micro-should@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier@3.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typescript@5.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@scure/base@1.2.6",
      "dependsOn": [
        "pkg:npm/@noble/hashes@1.8.0",
        "pkg:npm/@paulmillr/jsbt@0.3.3",
        "pkg:npm/@types/node@22.15.23",
        "pkg:npm/fast-check@4.1.1",
        "pkg:npm/micro-bmark@0.4.2",
        "pkg:npm/micro-should@0.5.3",
        "pkg:npm/prettier@3.5.3",
        "pkg:npm/typescript@5.8.3"
      ]
    },
    {
      "ref": "pkg:npm/@esbuild/aix-ppc64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-arm64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/android-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-arm64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/darwin-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-arm64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/freebsd-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-arm64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ia32@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-loong64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-mips64el@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-ppc64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-riscv64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-s390x@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/linux-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/netbsd-arm64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/netbsd-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openbsd-arm64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/openbsd-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/sunos-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-arm64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-ia32@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@esbuild/win32-x64@0.25.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild@0.25.0",
      "dependsOn": [
        "pkg:npm/@esbuild/aix-ppc64@0.25.0",
        "pkg:npm/@esbuild/android-arm64@0.25.0",
        "pkg:npm/@esbuild/android-arm@0.25.0",
        "pkg:npm/@esbuild/android-x64@0.25.0",
        "pkg:npm/@esbuild/darwin-arm64@0.25.0",
        "pkg:npm/@esbuild/darwin-x64@0.25.0",
        "pkg:npm/@esbuild/freebsd-arm64@0.25.0",
        "pkg:npm/@esbuild/freebsd-x64@0.25.0",
        "pkg:npm/@esbuild/linux-arm64@0.25.0",
        "pkg:npm/@esbuild/linux-arm@0.25.0",
        "pkg:npm/@esbuild/linux-ia32@0.25.0",
        "pkg:npm/@esbuild/linux-loong64@0.25.0",
        "pkg:npm/@esbuild/linux-mips64el@0.25.0",
        "pkg:npm/@esbuild/linux-ppc64@0.25.0",
        "pkg:npm/@esbuild/linux-riscv64@0.25.0",
        "pkg:npm/@esbuild/linux-s390x@0.25.0",
        "pkg:npm/@esbuild/linux-x64@0.25.0",
        "pkg:npm/@esbuild/netbsd-arm64@0.25.0",
        "pkg:npm/@esbuild/netbsd-x64@0.25.0",
        "pkg:npm/@esbuild/openbsd-arm64@0.25.0",
        "pkg:npm/@esbuild/openbsd-x64@0.25.0",
        "pkg:npm/@esbuild/sunos-x64@0.25.0",
        "pkg:npm/@esbuild/win32-arm64@0.25.0",
        "pkg:npm/@esbuild/win32-ia32@0.25.0",
        "pkg:npm/@esbuild/win32-x64@0.25.0"
      ]
    },
    {
      "ref": "pkg:npm/build@1.0.0",
      "dependsOn": [
        "pkg:npm/esbuild@0.25.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@scure/base@1.2.6"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-28T16:35:17Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, July 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'base' with version '1.2.6'. The application also has 1 child modules/components. The package type in this SBOM is npm with 5 purl namespaces described under components. The components were identified from the source files: package-lock.json, test/build/package-lock.json."
    }
  ]
}