{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:7ef9ce52-d799-4594-b749-d799c9a4324b", "version": 1, "metadata": { "timestamp": "2026-09-21T18:56:12Z", "tools": { "components": [ { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } ] }, "authors": [ { "name": "OWASP Foundation" } ], "lifecycles": [ { "phase": "pre-build" } ], "component": { "name": "55-pnpm-with-lockfile", "group": "", "purl": "pkg:npm/55-pnpm-with-lockfile", "bom-ref": "pkg:npm/55-pnpm-with-lockfile", "properties": [], "type": "application", "components": [ { "group": "", "name": "turbo-npm-root-proj", "version": "", "purl": "pkg:npm/turbo-npm-root-proj", "type": "application", "bom-ref": "pkg:npm/turbo-npm-root-proj" }, { "group": "", "name": "turbo-npm", "version": "", "purl": "pkg:npm/turbo-npm", "type": "application", "bom-ref": "pkg:npm/turbo-npm" }, { "group": "", "name": "51-npm-with-lockfile", "version": "", "purl": "pkg:npm/51-npm-with-lockfile", "type": "application", "bom-ref": "pkg:npm/51-npm-with-lockfile" }, { "group": "", "name": "26-multiple-lock-files-pnpm", "version": "", "purl": "pkg:npm/26-multiple-lock-files-pnpm", "type": "application", "bom-ref": "pkg:npm/26-multiple-lock-files-pnpm" }, { "group": "", "name": "25-multiple-lock-files-yarn", "version": "", "purl": "pkg:npm/25-multiple-lock-files-yarn", "type": "application", "bom-ref": "pkg:npm/25-multiple-lock-files-yarn", "properties": [ { "name": "cdx:npm:scripts", "value": "build" }, { "name": "cdx:npm:buildScripts", "value": "build" } ] }, { "group": "", "name": "21-npm-workspaces", "version": "", "purl": "pkg:npm/21-npm-workspaces", "type": "application", "bom-ref": "pkg:npm/21-npm-workspaces" }, { "group": "", "name": "53-yarn-with-lockfile", "version": "", "purl": "pkg:npm/53-yarn-with-lockfile", "type": "application", "bom-ref": "pkg:npm/53-yarn-with-lockfile" }, { "group": "", "name": "31-turborepo-in-package-json", "version": "", "purl": "pkg:npm/31-turborepo-in-package-json", "type": "application", "bom-ref": "pkg:npm/31-turborepo-in-package-json" }, { "group": "", "name": "frontend", "version": "", "purl": "pkg:npm/frontend", "type": "application", "bom-ref": "pkg:npm/frontend" }, { "group": "", "name": "28-turborepo-with-yarn-workspaces", "version": "", "purl": "pkg:npm/28-turborepo-with-yarn-workspaces", "type": "application", "bom-ref": "pkg:npm/28-turborepo-with-yarn-workspaces" }, { "group": "", "name": "27-yarn-workspaces", "version": "", "purl": "pkg:npm/27-yarn-workspaces", "type": "application", "bom-ref": "pkg:npm/27-yarn-workspaces" }, { "group": "", "name": "02-zero-config-api", "version": "", "purl": "pkg:npm/02-zero-config-api", "type": "application", "bom-ref": "pkg:npm/02-zero-config-api", "properties": [ { "name": "cdx:npm:scripts", "value": "build" }, { "name": "cdx:npm:buildScripts", "value": "build" } ] } ] }, "properties": [ { "name": "cdx:bom:componentTypes", "value": "npm" }, { "name": "cdx:bom:componentSrcFiles", "value": "test/fixtures/21-npm-workspaces/a/package-lock.json\\ntest/fixtures/21-npm-workspaces/b/package-lock.json\\ntest/fixtures/21-npm-workspaces/package-lock.json\\ntest/fixtures/22-pnpm/pnpm-lock.yaml\\ntest/fixtures/23-pnpm-workspaces/pnpm-lock.yaml\\ntest/fixtures/24-pnpm-hoisted/pnpm-lock.yaml\\ntest/fixtures/25-multiple-lock-files-yarn/a/package.json\\ntest/fixtures/25-multiple-lock-files-yarn/b/package.json\\ntest/fixtures/25-multiple-lock-files-yarn/package-lock.json\\ntest/fixtures/25-multiple-lock-files-yarn/pnpm-lock.yaml\\ntest/fixtures/25-multiple-lock-files-yarn/yarn.lock\\ntest/fixtures/26-multiple-lock-files-pnpm/package-lock.json\\ntest/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml\\ntest/fixtures/27-yarn-workspaces/a/package.json\\ntest/fixtures/27-yarn-workspaces/b/package.json\\ntest/fixtures/27-yarn-workspaces/yarn.lock\\ntest/fixtures/28-pnpm-7/pnpm-lock.yaml\\ntest/fixtures/28-turborepo-with-yarn-workspaces/a/package.json\\ntest/fixtures/28-turborepo-with-yarn-workspaces/b/package.json\\ntest/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock\\ntest/fixtures/29-nested-workspaces/backend/pnpm-lock.yaml\\ntest/fixtures/29-nested-workspaces/frontend/a/package.json\\ntest/fixtures/29-nested-workspaces/frontend/b/package.json\\ntest/fixtures/29-nested-workspaces/frontend/yarn.lock\\ntest/fixtures/30-double-nested-workspaces/packages/backend/pnpm-lock.yaml\\ntest/fixtures/30-double-nested-workspaces/packages/frontend/a/package.json\\ntest/fixtures/30-double-nested-workspaces/packages/frontend/b/package.json\\ntest/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock\\ntest/fixtures/31-turborepo-in-package-json/a/package.json\\ntest/fixtures/31-turborepo-in-package-json/b/package.json\\ntest/fixtures/31-turborepo-in-package-json/yarn.lock" } ] }, "components": [ { "group": "", "name": "once", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1" } ], "purl": "pkg:npm/once@1.4.0", "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/backend/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/backend-d30@0.1.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/backend/d/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/backend-d29@0.1.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/29-nested-workspaces/backend/d/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-d23@0.1.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/23-pnpm-workspaces/d/package.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/backend/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/28-pnpm-7/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/24-pnpm-hoisted/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/23-pnpm-workspaces/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/22-pnpm/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:isRegistryDependency", "value": "false" }, { "name": "cdx:npm:resolvedPath", "value": "node_modules/.pnpm/once@1.4.0/node_modules/once" }, { "name": "cdx:npm:isLink", "value": "true" }, { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/yarn.lock" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/yarn.lock" } ] } }, { "group": "", "name": "wrappy", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f" } ], "purl": "pkg:npm/wrappy@1.0.2", "type": "library", "bom-ref": "pkg:npm/wrappy@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/backend/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/backend-d30@0.1.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/backend/d/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/backend-d29@0.1.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/29-nested-workspaces/backend/d/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-d23@0.1.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/23-pnpm-workspaces/d/package.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/backend/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/28-pnpm-7/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/24-pnpm-hoisted/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/23-pnpm-workspaces/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/22-pnpm/pnpm-lock.yaml" }, { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/package-lock.json" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz" }, { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:resolvedPath", "value": "node_modules/.pnpm/wrappy@1.0.2/node_modules/wrappy" }, { "name": "cdx:npm:isLink", "value": "true" }, { "name": "cdx:npm:isRegistryDependency", "value": "false" }, { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/yarn.lock" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/yarn.lock" } ] } }, { "group": "", "name": "ansi-regex", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f8ef4972df307fefa55f1c4573885cf0bb23692ab41c5cf32fb715b30f2944320f763283da64f8cad0d994bb92059e1c2ca6455c8acc18eec36d00ad30924c2b" } ], "purl": "pkg:npm/ansi-regex@3.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@3.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "ansi-regex", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15" } ], "purl": "pkg:npm/ansi-regex@5.0.1", "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "ansi-styles", "version": "4.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212" } ], "purl": "pkg:npm/ansi-styles@4.3.0", "type": "library", "bom-ref": "pkg:npm/ansi-styles@4.3.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "camelcase", "version": "5.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026" } ], "purl": "pkg:npm/camelcase@5.3.1", "type": "library", "bom-ref": "pkg:npm/camelcase@5.3.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "cliui", "version": "6.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b7ac1b82da025ef033b2ded0817c4962a3edd2eb047db81075fb443db2cbfdcbefe873c4e5582fa82b80203474360539d9db3aac5c2aae06a434bac712309bad" } ], "purl": "pkg:npm/cliui@6.0.0", "type": "library", "bom-ref": "pkg:npm/cliui@6.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "color-convert", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529" } ], "purl": "pkg:npm/color-convert@2.0.1", "type": "library", "bom-ref": "pkg:npm/color-convert@2.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "color-name", "version": "1.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40" } ], "purl": "pkg:npm/color-name@1.1.4", "type": "library", "bom-ref": "pkg:npm/color-name@1.1.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "cowsay", "version": "1.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f08a73af9e19f3344eaffeb60bc7f43dd850703bac4b4e602934bcef1c5d8e2f156d679f5a5cb493c07018aefe56a6a63ab92fdde1ac0a43edbe51f3ae15ac08" } ], "purl": "pkg:npm/cowsay@1.5.0", "type": "library", "bom-ref": "pkg:npm/cowsay@1.5.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:package_json", "value": "/app/packages/fs-detectors/test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cowsay/-/cowsay-1.5.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/21-npm-workspaces/node_modules/.bin/cowsay, /app/packages/fs-detectors/test/fixtures/21-npm-workspaces/node_modules/.bin/cowthink" }, { "name": "cdx:npm:bin", "value": "cowsay, cowthink" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "internal:workspaceRef", "value": "pkg:npm/b31@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/31-turborepo-in-package-json/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-b30@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-b29@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b28@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b27@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/27-yarn-workspaces/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b25@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "debug", "version": "4.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3d15851ee494dde0ed4093ef9cd63b25c91eb758f4b793ae3ac1733cfcec7a40f9d9997ca947c520f122b305ea22f1d61951ce817fbb1bfbc234d85e870c5f91" } ], "purl": "pkg:npm/debug@4.3.4", "type": "library", "bom-ref": "pkg:npm/debug@4.3.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "cdx:npm:package_json", "value": "/app/packages/fs-detectors/test/fixtures/26-multiple-lock-files-pnpm/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/a/package.json" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "internal:workspaceRef", "value": "pkg:npm/a31@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/31-turborepo-in-package-json/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-a30@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-a29@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a28@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a27@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/27-yarn-workspaces/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a25@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/a/package.json" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "decamelize", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970" }, { "alg": "SHA-1", "content": "f6534d15148269b20352e7bee26f501f9a191290" } ], "purl": "pkg:npm/decamelize@1.2.0", "type": "library", "bom-ref": "pkg:npm/decamelize@1.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "emoji-regex", "version": "8.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8" } ], "purl": "pkg:npm/emoji-regex@8.0.0", "type": "library", "bom-ref": "pkg:npm/emoji-regex@8.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "find-up", "version": "4.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297" } ], "purl": "pkg:npm/find-up@4.1.0", "type": "library", "bom-ref": "pkg:npm/find-up@4.1.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "get-caller-file", "version": "2.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616" } ], "purl": "pkg:npm/get-caller-file@2.0.5", "type": "library", "bom-ref": "pkg:npm/get-caller-file@2.0.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "get-stdin", "version": "8.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b18db6680eb1721033a6b8f2aa648442fe146c003344dd0bd9d401d0d94de5a7134caf43a27ea78687377806d49e966208034031f77ffb8d2455d29f17282886" } ], "purl": "pkg:npm/get-stdin@8.0.0", "type": "library", "bom-ref": "pkg:npm/get-stdin@8.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-8.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "is-fullwidth-code-point", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "547b2400a60cf117d2157c1e7b9b7971b3793d97aad56ae1eaa7796e4ca25c87fa51070deb0fc0d1e5ccf6beadf1df8660e87ea3a6618849dbf3c2cdfd8f26db" }, { "alg": "SHA-1", "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f" } ], "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "is-fullwidth-code-point", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742" } ], "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "locate-path", "version": "5.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2" } ], "purl": "pkg:npm/locate-path@5.0.0", "type": "library", "bom-ref": "pkg:npm/locate-path@5.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "ms", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db" } ], "purl": "pkg:npm/ms@2.1.2", "type": "library", "bom-ref": "pkg:npm/ms@2.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/a/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "p-limit", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb" } ], "purl": "pkg:npm/p-limit@2.3.0", "type": "library", "bom-ref": "pkg:npm/p-limit@2.3.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "p-locate", "version": "4.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec" } ], "purl": "pkg:npm/p-locate@4.1.0", "type": "library", "bom-ref": "pkg:npm/p-locate@4.1.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "p-try", "version": "2.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75" } ], "purl": "pkg:npm/p-try@2.2.0", "type": "library", "bom-ref": "pkg:npm/p-try@2.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "path-exists", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff" } ], "purl": "pkg:npm/path-exists@4.0.0", "type": "library", "bom-ref": "pkg:npm/path-exists@4.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "require-directory", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42" } ], "purl": "pkg:npm/require-directory@2.1.1", "type": "library", "bom-ref": "pkg:npm/require-directory@2.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "require-main-filename", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "34a37990c0f294aba577160b4947eb6e8e53bb387885dfb613c34f3d7d36999b67d55b911104e861efd9765272f89dee0a97da886174e5eec1f16d225db4079a" } ], "purl": "pkg:npm/require-main-filename@2.0.0", "type": "library", "bom-ref": "pkg:npm/require-main-filename@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "set-blocking", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "045f9782d011ae9a6803ddd382b24392b3d890f7" } ], "purl": "pkg:npm/set-blocking@2.0.0", "type": "library", "bom-ref": "pkg:npm/set-blocking@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "string-width", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093" } ], "purl": "pkg:npm/string-width@2.1.1", "type": "library", "bom-ref": "pkg:npm/string-width@2.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "string-width", "version": "4.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe" } ], "purl": "pkg:npm/string-width@4.2.3", "type": "library", "bom-ref": "pkg:npm/string-width@4.2.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "strip-ansi", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a8479022eb1ac368a871389b635262c505ee368f" } ], "purl": "pkg:npm/strip-ansi@4.0.0", "type": "library", "bom-ref": "pkg:npm/strip-ansi@4.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "strip-ansi", "version": "6.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4" } ], "purl": "pkg:npm/strip-ansi@6.0.1", "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "strip-final-newline", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "06ba6f7cd004ddd72fabb965df156e9b38ca8d9439b48d6c11420aaf752892cd17525e394addc595ab55a9e7fda6b9388d10f3856e96660fb76e4f77cbaa4b8c" } ], "purl": "pkg:npm/strip-final-newline@2.0.0", "type": "library", "bom-ref": "pkg:npm/strip-final-newline@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-2.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "which-module", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a" } ], "purl": "pkg:npm/which-module@2.0.0", "type": "library", "bom-ref": "pkg:npm/which-module@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "wrap-ansi", "version": "6.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "afa94f7011b1657948732984bbb227c43321756d0a0f1a4b82814b720b9ab3109a27f48e219c0835ab4af4a63fb5ff99ae5cb038a5345038f70135d405fc495c" } ], "purl": "pkg:npm/wrap-ansi@6.2.0", "type": "library", "bom-ref": "pkg:npm/wrap-ansi@6.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "y18n", "version": "4.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "24a86a4cec12aea340d4d639952ced2751ab06252874b326219b8b88368c449fa2b4577e001544f170633af2162fead2a8d0c2ef82c24859a56ff538519e2125" } ], "purl": "pkg:npm/y18n@4.0.3", "type": "library", "bom-ref": "pkg:npm/y18n@4.0.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "yargs-parser", "version": "18.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a39d23d09793a32ff82ba39971a4265ba9725d72a1abb72c4445dc0f0936a2614f244c1434e56d24abe60ebf442357c025953265c445ee4c460569915ee76b09" } ], "purl": "pkg:npm/yargs-parser@18.1.3", "type": "library", "bom-ref": "pkg:npm/yargs-parser@18.1.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "yargs", "version": "15.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "69e3dbc4399c616fbe3daa81b09f8761417009dbf82d5bdd9e1072efc139ecf228afcfce56f84cac00c51440e1f031c3151bff3bd8b794f86c10d8ceed05f4f8" } ], "purl": "pkg:npm/yargs@15.4.1", "type": "library", "bom-ref": "pkg:npm/yargs@15.4.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/pnpm-lock.yaml" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b26@1.0.0" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/26-multiple-lock-files-pnpm/b/package.json" }, { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz" }, { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/yarn.lock" }, { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/27-yarn-workspaces/yarn.lock" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/yarn.lock" } ] } }, { "group": "", "name": "exeggcute", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a8b5da9088631820e6f60831e02bc47399a76c15" } ], "purl": "pkg:npm/exeggcute@1.0.0", "type": "library", "bom-ref": "pkg:npm/exeggcute@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/24-pnpm-hoisted/pnpm-lock.yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/24-pnpm-hoisted/pnpm-lock.yaml" } ], "concludedValue": "test/fixtures/24-pnpm-hoisted/pnpm-lock.yaml" } ] } }, { "group": "", "name": "once@1.4.0", "version": "", "scope": "optional", "purl": "pkg:npm/once%401.4.0", "type": "library", "bom-ref": "pkg:npm/once@1.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:isRegistryDependency", "value": "false" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tap", "version": "2.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c7b6bd397ff1d9fbf93e58ebe58c7915fda880b4" } ], "purl": "pkg:npm/tap@2.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tap/-/tap-2.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tap@2.3.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tap/-/tap-2.3.4.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.pnpm/wrappy@1.0.2/node_modules/wrappy/node_modules/.bin/tap" }, { "name": "cdx:npm:bin", "value": "tap" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "codecov.io", "version": "0.1.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "59dfd02da1ff31c2fb2b952ad8ad16fd3781b728" } ], "purl": "pkg:npm/codecov.io@0.1.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/codecov.io/-/codecov.io-0.1.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/codecov.io@0.1.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/codecov.io/-/codecov.io-0.1.6.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/codecov" }, { "name": "cdx:npm:bin", "value": "codecov" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "request", "version": "2.42.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "572bd0148938564040ac7ab148b96423a063304a" } ], "purl": "pkg:npm/request@2.42.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/request/-/request-2.42.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/request@2.42.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/request/-/request-2.42.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "request has been deprecated, see https://github.com/request/request/issues/3142" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "bl", "version": "0.9.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c06b797af085ea00bc527afc8efcf11de2232054" } ], "purl": "pkg:npm/bl@0.9.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/bl/-/bl-0.9.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bl@0.9.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/bl/-/bl-0.9.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.0.34", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c" } ], "purl": "pkg:npm/readable-stream@1.0.34", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.0.34", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561" } ], "purl": "pkg:npm/core-util-is@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "inherits", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1" } ], "purl": "pkg:npm/inherits@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inherits@2.0.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf" } ], "purl": "pkg:npm/isarray@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@0.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "0.10.31", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94" } ], "purl": "pkg:npm/string_decoder@0.10.31", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@0.10.31", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz" }, { "name": "cdx:npm:package:optional", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "caseless", "version": "0.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "8167c1ab8397fb5bb95f96d28e5a81c50f247ac4" } ], "purl": "pkg:npm/caseless@0.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/caseless/-/caseless-0.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.6.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/caseless/-/caseless-0.6.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "forever-agent", "version": "0.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6d0e09c4921f94a27f63d3b49c5feff1ea4c5130" } ], "purl": "pkg:npm/forever-agent@0.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.5.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "json-stringify-safe", "version": "5.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb" } ], "purl": "pkg:npm/json-stringify-safe@5.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json-stringify-safe@5.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "mime-types", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "995ae1392ab8affcbfcb2641dd054e943c0d5dce" } ], "purl": "pkg:npm/mime-types@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "node-uuid", "version": "1.4.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b040eb0923968afabf8d32fb1f17f1167fdab907" } ], "purl": "pkg:npm/node-uuid@1.4.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/node-uuid@1.4.8", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.8.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/uuid" }, { "name": "cdx:npm:bin", "value": "uuid" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Use uuid module instead" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "qs", "version": "1.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "19b57ff24dc2a99ce1f8bdf6afcda59f8ef61f88" } ], "purl": "pkg:npm/qs@1.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/qs/-/qs-1.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/qs@1.2.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/qs/-/qs-1.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tunnel-agent", "version": "0.4.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6373db76909fe570e08d73583365ed828a74eeeb" } ], "purl": "pkg:npm/tunnel-agent@0.4.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tunnel-agent@0.4.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "aws-sign2", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c57103f7a17fc037f02d7c2e64b602ea223f7d63" } ], "purl": "pkg:npm/aws-sign2@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.5.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "form-data", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "91abd788aba9702b1aabfa8bc01031a2ac9e3b12" } ], "purl": "pkg:npm/form-data@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/form-data@0.1.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "async", "version": "0.9.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "aea74d5e61c1f899613bf64bda66d4c78f2fd17d" } ], "purl": "pkg:npm/async@0.9.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/async/-/async-0.9.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/async@0.9.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/async/-/async-0.9.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "combined-stream", "version": "0.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0137e657baa5a7541c57ac37ac5fc07d73b4dc1f" } ], "purl": "pkg:npm/combined-stream@0.0.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@0.0.7", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "delayed-stream", "version": "0.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d4b1f43a93e8296dfe02694f4680bc37a313c73f" } ], "purl": "pkg:npm/delayed-stream@0.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@0.0.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "mime", "version": "1.2.11", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "58203eed86e3a5ef17aed2b7d9ebd47f0a60dd10" } ], "purl": "pkg:npm/mime@1.2.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime@1.2.11", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "hawk", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "87cd491f9b46e4e2aeaca335416766885d2d1ed9" } ], "purl": "pkg:npm/hawk@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/hawk@1.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "boom", "version": "0.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7a636e9ded4efcefb19cef4947a3c67dfaee911b" } ], "purl": "pkg:npm/boom@0.4.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/boom@0.4.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "hoek", "version": "0.9.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3d322462badf07716ea7eb85baf88079cddce505" } ], "purl": "pkg:npm/hoek@0.9.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/hoek@0.9.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "cryptiles", "version": "0.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ed91ff1f17ad13d3748288594f8a48a0d26f325c" } ], "purl": "pkg:npm/cryptiles@0.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cryptiles@0.2.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz" }, { "name": "cdx:npm:deprecated", "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "sntp", "version": "0.2.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fb885f18b0f3aad189f824862536bceeec750900" } ], "purl": "pkg:npm/sntp@0.2.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sntp@0.2.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "http-signature", "version": "0.10.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4fbdac132559aa8323121e540779c0a012b27e66" } ], "purl": "pkg:npm/http-signature@0.10.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@0.10.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "asn1", "version": "0.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "559be18376d08a4ec4dbe80877d27818639b2df7" } ], "purl": "pkg:npm/asn1@0.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.1.11", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "assert-plus", "version": "0.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ee74009413002d84cec7219c6ac811812e723160" } ], "purl": "pkg:npm/assert-plus@0.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@0.1.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "ctype", "version": "0.5.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "82c18c2461f74114ef16c135224ad0b9144ca12f" } ], "purl": "pkg:npm/ctype@0.5.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ctype@0.5.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "oauth-sign", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f22956f31ea7151a821e5f2fb32c113cad8b9f69" } ], "purl": "pkg:npm/oauth-sign@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "stringstream", "version": "0.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "f3b18404091e81b05cc1e4e852b7737f778b856360d3a1494de6e5e01549cff2605b2f02bc4afd751b57e6a5a9862ca7312425c718be42a374cf94f7d922e584" } ], "purl": "pkg:npm/stringstream@0.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/stringstream@0.0.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tough-cookie", "version": "4.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b4776d12940232b73560bacc6aa5d7723e80c61622ff1822b7a999bb5f840d6527faa8547fcc0c428148cbd357baadb7cc0c2d701d2dfcc8c0086475f297116e" } ], "purl": "pkg:npm/tough-cookie@4.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-4.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@4.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-4.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "psl", "version": "1.8.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "44874ecf2a1abcafa1035f0e186583a944ec08b86d03b21c67fe8d0ace1f14968704369bfa90c3983201c96151409ab609deebd4ea10c4118a39acedabe86321" } ], "purl": "pkg:npm/psl@1.8.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/psl@1.8.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/psl/-/psl-1.8.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "punycode", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0" } ], "purl": "pkg:npm/punycode@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/punycode@2.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "universalify", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ac125e2390970259b2d6957eeb5ed607d27add4e9771acc71c5d9fd9d6c98b1e17ce9505d114b765b8f414620e080bdae4ffddfc604e61a002435c3ed1acd492" } ], "purl": "pkg:npm/universalify@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/universalify@0.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "urlgrey", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f065357040fb35c3b311d4e5dc36484d96dbea06" } ], "purl": "pkg:npm/urlgrey@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/urlgrey/-/urlgrey-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/urlgrey@0.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/urlgrey/-/urlgrey-0.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tape", "version": "2.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0dfeec709227fbcc9170abe7f046962b271431db" } ], "purl": "pkg:npm/tape@2.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tape/-/tape-2.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tape@2.3.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tape/-/tape-2.3.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/tape" }, { "name": "cdx:npm:bin", "value": "tape" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "deep-equal", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b246c2b80a570a47c11be1d9bd1070ec878b87ce" } ], "purl": "pkg:npm/deep-equal@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-equal@0.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "defined", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f35eea7d705e933baf13b2f03b3f83d921403b3e" } ], "purl": "pkg:npm/defined@0.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/defined/-/defined-0.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/defined@0.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/defined/-/defined-0.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "jsonify", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73" } ], "purl": "pkg:npm/jsonify@0.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsonify@0.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "resumer", "version": "0.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f1e8f461e4064ba39e82af3cdc2a8c893d076759" } ], "purl": "pkg:npm/resumer@0.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resumer/-/resumer-0.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resumer@0.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resumer/-/resumer-0.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "through", "version": "2.3.8", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5" } ], "purl": "pkg:npm/through@2.3.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/through@2.3.8", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "split", "version": "0.2.10", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "67097c601d697ce1368f418f06cd201cf0521a57" } ], "purl": "pkg:npm/split@0.2.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/split/-/split-0.2.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/split@0.2.10", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/split/-/split-0.2.10.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "stream-combiner", "version": "0.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4d5e433c185261dde623ca3f44c586bcf5c4ad14" } ], "purl": "pkg:npm/stream-combiner@0.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/stream-combiner@0.0.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "duplexer", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8ed0fa606dfbd190888bff464da24a431593643d38e7ee11e214e4ff1d54ca8a9a77227dc7d0a04a2d519550d017c536b312cb4a716409a32286a9631c85a032" } ], "purl": "pkg:npm/duplexer@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/duplexer@0.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "coveralls", "version": "2.13.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8a20269fe9755ea47034b5e15bc46ce6a1d9445318a7d6483e310e551a42fdce2ca3a63f7f8fe5162d057d1e41f5c0aa83286427971999bbdc5517cff0c1dc87" } ], "purl": "pkg:npm/coveralls@2.13.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/coveralls/-/coveralls-2.13.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/coveralls@2.13.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/coveralls/-/coveralls-2.13.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/coveralls" }, { "name": "cdx:npm:bin", "value": "coveralls" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "js-yaml", "version": "3.6.1", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "6e5fe67d8b205ce4d22fad05b7781e8dadcc4b30" } ], "purl": "pkg:npm/js-yaml@3.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.6.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/coveralls/node_modules/.bin/js-yaml" }, { "name": "cdx:npm:bin", "value": "js-yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "js-yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "occurrences": [ { "location": "dist/workspaces/get-workspace-package-paths.js", "line": 8 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 2 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 136 } ] } }, { "group": "", "name": "argparse", "version": "1.0.10", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e" } ], "purl": "pkg:npm/argparse@1.0.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/argparse@1.0.10", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "sprintf-js", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "04e6926f662895354f3dd015203633b857297e2c" } ], "purl": "pkg:npm/sprintf-js@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sprintf-js@1.0.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "2.7.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "96e3b70d5779f6ad49cd032673d1c312767ba581" } ], "purl": "pkg:npm/esprima@2.7.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@2.7.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/coveralls/node_modules/.bin/esparse, /app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/coveralls/node_modules/.bin/esvalidate" }, { "name": "cdx:npm:bin", "value": "esparse, esvalidate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "lcov-parse", "version": "0.0.10", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b0b8ff9ac9c7889250582b70b71315d9da6d9a3" } ], "purl": "pkg:npm/lcov-parse@0.0.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lcov-parse@0.0.10", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.10.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "log-driver", "version": "1.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7ae4ec257302fd790d557cb10c97100d857b0056" } ], "purl": "pkg:npm/log-driver@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/log-driver@1.2.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] }, "tags": [ "driver" ] }, { "group": "", "name": "minimist", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a35008b20f41383eec1fb914f4cd5df79a264284" } ], "purl": "pkg:npm/minimist@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "request", "version": "2.79.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4dfe5bf6be8b8cdc37fcf93e04b65577722710de" } ], "purl": "pkg:npm/request@2.79.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/request/-/request-2.79.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/request@2.79.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/request/-/request-2.79.0.tgz" }, { "name": "cdx:npm:deprecated", "value": "request has been deprecated, see https://github.com/request/request/issues/3142" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "aws-sign2", "version": "0.6.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "14342dd38dbcc94d0e5b87d763cd63612c0e794f" } ], "purl": "pkg:npm/aws-sign2@0.6.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/aws-sign2@0.6.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "aws4", "version": "1.11.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c61d51977e21e858b50c2d9658a7f151356a46c367afa2ec2b3dbe85fc03c502569abc7cf9cef295aa8131c1df975535af676c89f3af297dcb42e2cd67e5d2bc" } ], "purl": "pkg:npm/aws4@1.11.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/aws4@1.11.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/aws4/-/aws4-1.11.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "caseless", "version": "0.11.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "715b96ea9841593cc33067923f5ec60ebda4f7d7" } ], "purl": "pkg:npm/caseless@0.11.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/caseless/-/caseless-0.11.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/caseless@0.11.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/caseless/-/caseless-0.11.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "combined-stream", "version": "1.0.8", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476" } ], "purl": "pkg:npm/combined-stream@1.0.8", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz" } ], "type": "library", "bom-ref": "pkg:npm/combined-stream@1.0.8", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "delayed-stream", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619" } ], "purl": "pkg:npm/delayed-stream@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/delayed-stream@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "extend", "version": "3.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe" } ], "purl": "pkg:npm/extend@3.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/extend@3.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "forever-agent", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91" } ], "purl": "pkg:npm/forever-agent@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/forever-agent@0.6.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "form-data", "version": "2.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "33c183acf193276ecaa98143a69e94bfee1750d1" } ], "purl": "pkg:npm/form-data@2.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/form-data@2.1.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "asynckit", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79" } ], "purl": "pkg:npm/asynckit@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/asynckit@0.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "mime-types", "version": "2.1.35", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b" } ], "purl": "pkg:npm/mime-types@2.1.35", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime-types@2.1.35", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "mime-db", "version": "1.52.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be" } ], "purl": "pkg:npm/mime-db@1.52.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mime-db@1.52.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "har-validator", "version": "2.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "cdcbc08188265ad119b6a5a7c8ab70eecfb5d27d" } ], "purl": "pkg:npm/har-validator@2.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/har-validator/-/har-validator-2.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/har-validator@2.0.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/har-validator/-/har-validator-2.0.6.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/har-validator" }, { "name": "cdx:npm:bin", "value": "har-validator" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "this library is no longer supported" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "chalk", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98" } ], "purl": "pkg:npm/chalk@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/chalk@1.1.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "ansi-styles", "version": "2.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b432dd3358b634cf75e1e4664368240533c1ddbe" } ], "purl": "pkg:npm/ansi-styles@2.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-styles@2.2.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "escape-string-regexp", "version": "1.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4" } ], "purl": "pkg:npm/escape-string-regexp@1.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escape-string-regexp@1.0.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "has-ansi", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91" } ], "purl": "pkg:npm/has-ansi@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-ansi@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "ansi-regex", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df" } ], "purl": "pkg:npm/ansi-regex@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@2.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "strip-ansi", "version": "3.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf" } ], "purl": "pkg:npm/strip-ansi@3.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@3.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "535d045ce6b6363fa40117084629995e9df324c7" } ], "purl": "pkg:npm/supports-color@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "commander", "version": "2.20.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71" } ], "purl": "pkg:npm/commander@2.20.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/commander@2.20.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "is-my-json-valid", "version": "2.20.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "d49430ba554d8f1f14aa43c4fdba836b1b47e0f5c27bfd95461ff2de9f7d85e395f3b1c6e08779fd57c3b3077e62201f1dc4537c39568084b27271ee859ab56b" } ], "purl": "pkg:npm/is-my-json-valid@2.20.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-my-json-valid/-/is-my-json-valid-2.20.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-my-json-valid@2.20.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-my-json-valid/-/is-my-json-valid-2.20.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "generate-function", "version": "2.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "79e07919f30d79ebe6fc6458ab6d12866b1a19c988f359085f62bd5d0c799a20bc29d1da0ba266d2a43c64d7863a2ef0601f0eb1dc4ab3e636a15b9316e57029" } ], "purl": "pkg:npm/generate-function@2.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/generate-function/-/generate-function-2.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/generate-function@2.3.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/generate-function/-/generate-function-2.3.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "is-property", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "57fe1c4e48474edd65b09911f26b1cd4095dda84" } ], "purl": "pkg:npm/is-property@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-property/-/is-property-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-property@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-property/-/is-property-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "generate-object-property", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9c0e1c40308ce804f4783618b937fa88f99d50d0" } ], "purl": "pkg:npm/generate-object-property@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/generate-object-property/-/generate-object-property-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/generate-object-property@1.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/generate-object-property/-/generate-object-property-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "is-my-ip-valid", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8f173c70170e59b34ada2d9a4e40993fa8bbc241c5d5ba8a16bc041ee37926d8390526991d4650fc94ce270a15e3562f1e739a47259687bd93fcabdf373f4326" } ], "purl": "pkg:npm/is-my-ip-valid@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-my-ip-valid/-/is-my-ip-valid-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-my-ip-valid@1.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-my-ip-valid/-/is-my-ip-valid-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "jsonpointer", "version": "5.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3cd61921d323548bd58034982934fadd8f8a67a219bc644d356731c03f86367533d4c28f7efdf427cb9e0a377070dd270f1d9296c860c81ececb47a903355146" } ], "purl": "pkg:npm/jsonpointer@5.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-5.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsonpointer@5.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-5.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "xtend", "version": "4.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011" } ], "purl": "pkg:npm/xtend@4.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/xtend@4.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "pinkie-promise", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2135d6dfa7a358c069ac9b178776288228450ffa" } ], "purl": "pkg:npm/pinkie-promise@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/pinkie-promise@2.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "pinkie", "version": "2.0.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870" } ], "purl": "pkg:npm/pinkie@2.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/pinkie@2.0.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "hawk", "version": "3.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "078444bd7c1640b0fe540d2c9b73d59678e8e1c4" } ], "purl": "pkg:npm/hawk@3.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/hawk@3.1.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "boom", "version": "2.10.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "39c8918ceff5799f83f9492a848f625add0c766f" } ], "purl": "pkg:npm/boom@2.10.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/boom@2.10.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz" }, { "name": "cdx:npm:deprecated", "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "hoek", "version": "2.16.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "20bb7403d3cea398e91dc4710a8ff1b8274a25ed" } ], "purl": "pkg:npm/hoek@2.16.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/hoek@2.16.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz" }, { "name": "cdx:npm:deprecated", "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "cryptiles", "version": "2.0.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3bdfecdc608147c1c67202fa291e7dca59eaa3b8" } ], "purl": "pkg:npm/cryptiles@2.0.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cryptiles@2.0.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz" }, { "name": "cdx:npm:deprecated", "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "sntp", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6541184cc90aeea6c6e7b35e2659082443c66198" } ], "purl": "pkg:npm/sntp@1.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sntp@1.0.9", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz" }, { "name": "cdx:npm:deprecated", "value": "This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "http-signature", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "df72e267066cd0ac67fb76adf8e134a8fbcf91bf" } ], "purl": "pkg:npm/http-signature@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/http-signature@1.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "assert-plus", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d74e1b87e7affc0db8aadb7021f3fe48101ab234" } ], "purl": "pkg:npm/assert-plus@0.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@0.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "jsprim", "version": "1.4.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "3f66d238c01cfdc88bcfa0f38235651893fdf81ac95aee540c62bbd02da2c1e0b940121e15fd195d1bc68c48f6b9882b63632400086c4961c35a516d12ba195b" } ], "purl": "pkg:npm/jsprim@1.4.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsprim@1.4.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "assert-plus", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525" } ], "purl": "pkg:npm/assert-plus@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/assert-plus@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "extsprintf", "version": "1.3.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05" } ], "purl": "pkg:npm/extsprintf@1.3.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/extsprintf@1.3.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "json-schema", "version": "0.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7acf783379d321fb043e2b1169f6a4f870cb7c75e7281855def5397aa3dc4b77e5216a9cc495a05c75e27b2dd8ae968db1a9d8e5e8b55686046cece28eeabd04" } ], "purl": "pkg:npm/json-schema@0.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/json-schema@0.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "verror", "version": "1.10.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3a105ca17053af55d6e270c1f8288682e18da400" } ], "purl": "pkg:npm/verror@1.10.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/verror@1.10.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "core-util-is", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7" } ], "purl": "pkg:npm/core-util-is@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/core-util-is@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "sshpk", "version": "1.17.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "ffd1c812cd595c68523c4f17e82726ecd6a6d73f0a7280aa3dd23b79c9b5377dc4cc07ad59a86f41656a2d9b5a650f880ca5f8232036a34801cea20c9006a01d" } ], "purl": "pkg:npm/sshpk@1.17.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.17.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/sshpk@1.17.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.17.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/sshpk-conv, /app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/sshpk-sign, /app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/sshpk-verify" }, { "name": "cdx:npm:bin", "value": "sshpk-conv, sshpk-sign, sshpk-verify" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "asn1", "version": "0.2.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "8b1fc5c4f9f43038dec89ee2ff2a07185b7f117e8bc8d6f148484f3d73833cbf8a07454f93ce9461f2f494c772f8a0a7bfe7e6bc8cf24b068ae423b0a956d64d" } ], "purl": "pkg:npm/asn1@0.2.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/asn1@0.2.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "safer-buffer", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6" } ], "purl": "pkg:npm/safer-buffer@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/safer-buffer@2.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "bcrypt-pbkdf", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a4301d389b6a43f9b67ff3ca11a3f6637e360e9e" } ], "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tweetnacl", "version": "0.14.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5ae68177f192d4456269d108afa93ff8743f4f64" } ], "purl": "pkg:npm/tweetnacl@0.14.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tweetnacl@0.14.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "dashdash", "version": "1.14.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0" } ], "purl": "pkg:npm/dashdash@1.14.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/dashdash@1.14.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "ecc-jsbn", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3a83a904e54353287874c564b7549386849a98c9" } ], "purl": "pkg:npm/ecc-jsbn@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ecc-jsbn@0.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "jsbn", "version": "0.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513" } ], "purl": "pkg:npm/jsbn@0.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/jsbn@0.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "getpass", "version": "0.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa" } ], "purl": "pkg:npm/getpass@0.1.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/getpass@0.1.7", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "is-typedarray", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a" } ], "purl": "pkg:npm/is-typedarray@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-typedarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "isstream", "version": "0.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a" } ], "purl": "pkg:npm/isstream@0.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isstream@0.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "oauth-sign", "version": "0.8.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "46a6ab7f0aead8deae9ec0565780b7d4efeb9d43" } ], "purl": "pkg:npm/oauth-sign@0.8.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/oauth-sign@0.8.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "qs", "version": "6.3.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "7fc090fec28906bf6f7cd24174688fcd348f52e7ee5b2bce16409824a37dbe8a8f5ae06e85d95264cefc74e1ca8a0b59d01c2e92d606ad1156d835d773f7f616" } ], "purl": "pkg:npm/qs@6.3.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/qs/-/qs-6.3.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/qs@6.3.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/qs/-/qs-6.3.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tough-cookie", "version": "2.3.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "4d9e934df23936d667bb2cbf29e72ff829e844e9f25e7d8337decba27b604290b0b17d97c8b6020b410d85891e8523b0029f2b4d029cfcd50817b064439aca2c" } ], "purl": "pkg:npm/tough-cookie@2.3.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tough-cookie@2.3.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "punycode", "version": "1.4.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e" } ], "purl": "pkg:npm/punycode@1.4.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/punycode@1.4.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "uuid", "version": "3.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1e3483470ea0644e4932081cb4705c8d56a4d3cf8a1158522220f31674fd4bd69e826a7ce52fdb45e0554dbe104c5691369b49f64b9868d8676cd10e91b29bfc" } ], "purl": "pkg:npm/uuid@3.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uuid@3.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/uuid" }, { "name": "cdx:npm:bin", "value": "uuid" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "deeper", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bc564e5f73174fdf201e08b00030e8a14da74368" } ], "purl": "pkg:npm/deeper@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/deeper/-/deeper-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deeper@2.1.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/deeper/-/deeper-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "foreground-child", "version": "1.5.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4fd71ad2dfde96789b980a5c0a295937cb2f5ce9" } ], "purl": "pkg:npm/foreground-child@1.5.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-1.5.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/foreground-child@1.5.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/foreground-child/-/foreground-child-1.5.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "cross-spawn", "version": "4.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7b9247621c23adfdd3856004a823cbe397424d41" } ], "purl": "pkg:npm/cross-spawn@4.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-4.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cross-spawn@4.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-4.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "lru-cache", "version": "4.1.5", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b166656c43f63ac1cd917acc97919893f8ca93bd0c06783a514e1823fa860d86e07fa61b3f812f9aa2126d70a826244ab3ed5b4a9147560431bc9d7b176962e6" } ], "purl": "pkg:npm/lru-cache@4.1.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lru-cache@4.1.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "pseudomap", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3" } ], "purl": "pkg:npm/pseudomap@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/pseudomap@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "yallist", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1c11f9218f076089a47dd512f93c6699a6a81d52" } ], "purl": "pkg:npm/yallist@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yallist@2.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "which", "version": "1.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221" } ], "purl": "pkg:npm/which@1.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/which@1.3.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/which/-/which-1.3.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/which" }, { "name": "cdx:npm:bin", "value": "which" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "isexe", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10" } ], "purl": "pkg:npm/isexe@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isexe@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "signal-exit", "version": "3.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19" } ], "purl": "pkg:npm/signal-exit@3.0.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@3.0.7", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "6.0.4", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "0f08860f6a155127b2fadd4f9ce24b1aab6e4d22" } ], "purl": "pkg:npm/glob@6.0.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-6.0.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@6.0.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-6.0.4.tgz" }, { "name": "ImportedModules", "value": "glob" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "occurrences": [ { "location": "dist/workspaces/get-workspace-package-paths.js", "line": 9 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 3 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 85 } ] } }, { "group": "", "name": "inflight", "version": "1.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9" } ], "purl": "pkg:npm/inflight@1.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/inflight@1.0.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "3.1.2", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f" } ], "purl": "pkg:npm/minimatch@3.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@3.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz" }, { "name": "ImportedModules", "value": "minimatch" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "occurrences": [ { "location": "dist/detect-builders.js", "line": 7 }, { "location": "src/detect-builders.ts", "line": 1 }, { "location": "src/detect-builders.ts", "line": 399 }, { "location": "src/detect-builders.ts", "line": 444 } ] } }, { "group": "", "name": "brace-expansion", "version": "1.1.11", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688" } ], "purl": "pkg:npm/brace-expansion@1.1.11", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "type": "library", "bom-ref": "pkg:npm/brace-expansion@1.1.11", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "balanced-match", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f" } ], "purl": "pkg:npm/balanced-match@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/balanced-match@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "concat-map", "version": "0.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b" } ], "purl": "pkg:npm/concat-map@0.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/concat-map@0.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "path-is-absolute", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f" } ], "purl": "pkg:npm/path-is-absolute@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/path-is-absolute@1.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "js-yaml", "version": "3.14.1", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6" } ], "purl": "pkg:npm/js-yaml@3.14.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/js-yaml@3.14.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/js-yaml" }, { "name": "cdx:npm:bin", "value": "js-yaml" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "ImportedModules", "value": "js-yaml" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "occurrences": [ { "location": "dist/workspaces/get-workspace-package-paths.js", "line": 8 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 2 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 136 } ] } }, { "group": "", "name": "esprima", "version": "4.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0" } ], "purl": "pkg:npm/esprima@4.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@4.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/esparse, /app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/esvalidate" }, { "name": "cdx:npm:bin", "value": "esparse, esvalidate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "mkdirp", "version": "0.5.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027" } ], "purl": "pkg:npm/mkdirp@0.5.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/mkdirp@0.5.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/mkdirp" }, { "name": "cdx:npm:bin", "value": "mkdirp" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "minimist", "version": "1.2.6", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "26c8e79386f0dd826a6336ddc8188db0f5873df3bef94186ef8f42c6cea9782bb95e0e27ade9dae8e571398c6b413ab0c34266c2df9179ff2b820ba69132f3f5" } ], "purl": "pkg:npm/minimist@1.2.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimist@1.2.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "nyc", "version": "3.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a21223ffcd86bf3d2d2ae9e14b8a08aeade046ee" } ], "purl": "pkg:npm/nyc@3.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/nyc/-/nyc-3.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/nyc@3.2.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/nyc/-/nyc-3.2.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/nyc" }, { "name": "cdx:npm:bin", "value": "nyc" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "foreground-child", "version": "1.3.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/foreground-child@1.3.0", "type": "library", "bom-ref": "pkg:npm/foreground-child@1.3.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "signal-exit", "version": "2.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "375879b1f92ebc3b334480d038dc546a6d558564" } ], "purl": "pkg:npm/signal-exit@2.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-2.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/signal-exit@2.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-2.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "win-spawn", "version": "2.0.0", "scope": "optional", "licenses": [ { "license": { "name": "BSD", "properties": [ { "name": "cdx:license:category", "value": "Unstated License" }, { "name": "cdx:license:foss", "value": "false" }, { "name": "cdx:license:osiApproved", "value": "false" }, { "name": "cdx:license:fsfLibre", "value": "false" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/win-spawn@2.0.0", "type": "library", "bom-ref": "pkg:npm/win-spawn@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/nyc/node_modules/foreground-child/node_modules/.bin/win-spawn" }, { "name": "cdx:npm:bin", "value": "win-spawn" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Unstated License" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "5.0.15", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "1bc936b9e02f4a603fcc222ecf7633d30b8b93b1" } ], "purl": "pkg:npm/glob@5.0.15", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@5.0.15", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz" }, { "name": "ImportedModules", "value": "glob" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "occurrences": [ { "location": "dist/workspaces/get-workspace-package-paths.js", "line": 9 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 3 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 85 } ] } }, { "group": "", "name": "istanbul", "version": "0.3.22", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "3e164d85021fe19c985d1f0e7ef0c3e22d012eb6" } ], "purl": "pkg:npm/istanbul@0.3.22", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/istanbul/-/istanbul-0.3.22.tgz" } ], "type": "library", "bom-ref": "pkg:npm/istanbul@0.3.22", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/istanbul/-/istanbul-0.3.22.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/istanbul" }, { "name": "cdx:npm:bin", "value": "istanbul" }, { "name": "cdx:npm:has_binary", "value": "true" }, { "name": "cdx:npm:deprecated", "value": "This module is no longer maintained, try this instead:\n npm i nyc\nVisit https://istanbul.js.org/integrations for other alternatives." } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "abbrev", "version": "1.0.9", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "91b4792588a7738c25f35dd6f63752a2f8776135" } ], "purl": "pkg:npm/abbrev@1.0.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/abbrev@1.0.9", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "async", "version": "1.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a" } ], "purl": "pkg:npm/async@1.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/async@1.5.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "escodegen", "version": "1.7.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "30ecfcf66ca98dc67cd2fd162abeb6eafa8ce6fc" } ], "purl": "pkg:npm/escodegen@1.7.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.7.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/escodegen@1.7.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/escodegen/-/escodegen-1.7.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/escodegen, /app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/esgenerate" }, { "name": "cdx:npm:bin", "value": "escodegen, esgenerate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "1.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0993502feaf668138325756f30f9a51feeec11e9" } ], "purl": "pkg:npm/esprima@1.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@1.2.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/escodegen/node_modules/.bin/esparse, /app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/escodegen/node_modules/.bin/esvalidate" }, { "name": "cdx:npm:bin", "value": "esparse, esvalidate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "estraverse", "version": "1.9.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "af67f2dc922582415950926091a4005d29c9bb44" } ], "purl": "pkg:npm/estraverse@1.9.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/estraverse@1.9.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "esutils", "version": "2.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea" } ], "purl": "pkg:npm/esutils@2.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esutils@2.0.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "optionator", "version": "0.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b75a8995a2d417df25b6e4e3862f50aa88651368" } ], "purl": "pkg:npm/optionator@0.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/optionator/-/optionator-0.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/optionator@0.5.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/optionator/-/optionator-0.5.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "deep-is", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "a083f392c993838fccae289a6063bea245c34fbced9ffc37129b6fffe81221d31d2ac268d2ee027d834524fcbee1228cb82a86c36c319c0f9444c837b7c6bf6d" } ], "purl": "pkg:npm/deep-is@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/deep-is@0.1.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "fast-levenshtein", "version": "1.0.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0178dcdee023b92905193af0959e8a7639cfdcb9" } ], "purl": "pkg:npm/fast-levenshtein@1.0.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-1.0.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fast-levenshtein@1.0.7", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-1.0.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "levn", "version": "0.2.5", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ba8d339d0ca4a610e3a3f145b9caf48807155054" } ], "purl": "pkg:npm/levn@0.2.5", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/levn/-/levn-0.2.5.tgz" } ], "type": "library", "bom-ref": "pkg:npm/levn@0.2.5", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/levn/-/levn-0.2.5.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "prelude-ls", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "21932a549f5e52ffd9a827f570e04be62a97da54" } ], "purl": "pkg:npm/prelude-ls@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/prelude-ls@1.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "type-check", "version": "0.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5884cab512cf1d355e3fb784f30804b2b520db72" } ], "purl": "pkg:npm/type-check@0.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/type-check@0.3.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "wordwrap", "version": "0.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107" } ], "purl": "pkg:npm/wordwrap@0.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@0.0.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "dab73fbcfc2ba819b4de03bd6f6eaa48164b3f9d" } ], "purl": "pkg:npm/source-map@0.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "amdefine", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5" } ], "purl": "pkg:npm/amdefine@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/amdefine@1.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "esprima", "version": "2.5.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f387a46fd344c1b1a39baf8c20bfb43b6d0058cc" } ], "purl": "pkg:npm/esprima@2.5.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/esprima/-/esprima-2.5.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/esprima@2.5.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/esprima/-/esprima-2.5.0.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/istanbul/node_modules/.bin/esparse, /app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/istanbul/node_modules/.bin/esvalidate" }, { "name": "cdx:npm:bin", "value": "esparse, esvalidate" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "fileset", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "588ef8973c6623b2a76df465105696b96aac8067" } ], "purl": "pkg:npm/fileset@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fileset/-/fileset-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fileset@0.2.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fileset/-/fileset-0.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "minimatch", "version": "2.0.10", "scope": "required", "hashes": [ { "alg": "SHA-1", "content": "8d087c39c6b38c001b97fca7ce6d0e1e80afbac7" } ], "purl": "pkg:npm/minimatch@2.0.10", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz" } ], "type": "library", "bom-ref": "pkg:npm/minimatch@2.0.10", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz" }, { "name": "cdx:npm:deprecated", "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue" }, { "name": "ImportedModules", "value": "minimatch" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "occurrences": [ { "location": "dist/detect-builders.js", "line": 7 }, { "location": "src/detect-builders.ts", "line": 1 }, { "location": "src/detect-builders.ts", "line": 399 }, { "location": "src/detect-builders.ts", "line": 444 } ] } }, { "group": "", "name": "handlebars", "version": "4.7.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6807179b93807c4ffc21791c66f09ea4a5375735b5ff7f456f966ea8cb6023f853f17d9882832f058e5d2e1abf7293afc3b2e4d672bf505ef568b1bf66755844" } ], "purl": "pkg:npm/handlebars@4.7.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/handlebars@4.7.7", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/handlebars" }, { "name": "cdx:npm:bin", "value": "handlebars" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "neo-async", "version": "2.6.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "61ddd4112e665824aa47ea8d4fddd2dd4a18524a8067d94b83c6bb83dae29ac5a66062bc7154e8038fec17746bb21772577b0018c5d5526a4c60ec3e74ba4ebb" } ], "purl": "pkg:npm/neo-async@2.6.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/neo-async@2.6.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "source-map", "version": "0.6.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee" } ], "purl": "pkg:npm/source-map@0.6.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/source-map@0.6.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "wordwrap", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "27584810891456a4171c8d0226441ade90cbcaeb" } ], "purl": "pkg:npm/wordwrap@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wordwrap@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "uglify-js", "version": "3.15.4", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "bcc38f183baf5de70fb37e15ef8a832a4e2227f48de2f2f73b0ff6de2c5a7c4358bedacdbed6dc8147ae8137141911ac385ff97d4f3f35848be47c9bde5d4e24" } ], "purl": "pkg:npm/uglify-js@3.15.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.15.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/uglify-js@3.15.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.15.4.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/uglifyjs" }, { "name": "cdx:npm:bin", "value": "uglifyjs" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "nopt", "version": "3.0.6", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "c6465dbf08abcd4db359317f79ac68a646b28ff9" } ], "purl": "pkg:npm/nopt@3.0.6", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz" } ], "type": "library", "bom-ref": "pkg:npm/nopt@3.0.6", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/nopt" }, { "name": "cdx:npm:bin", "value": "nopt" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "resolve", "version": "1.1.7", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b" } ], "purl": "pkg:npm/resolve@1.1.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/resolve@1.1.7", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "3.2.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "65ac0504b3954171d8a64946b2ae3cbb8a5f54f6" } ], "purl": "pkg:npm/supports-color@3.2.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@3.2.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "has-flag", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa" } ], "purl": "pkg:npm/has-flag@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/has-flag@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "lodash", "version": "3.10.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5bf45e8e49ba4189e17d482789dfd15bd140b7b6" } ], "purl": "pkg:npm/lodash@3.10.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lodash@3.10.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "rimraf", "version": "2.7.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3" } ], "purl": "pkg:npm/rimraf@2.7.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/rimraf@2.7.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/rimraf" }, { "name": "cdx:npm:bin", "value": "rimraf" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "glob", "version": "7.2.0", "scope": "required", "hashes": [ { "alg": "SHA-512", "content": "9662dfea0b72acfabcb538d29ab3bde3005e41b151dc76cb1dbbb20faf70bb2424226a76856a8c181e3b397eb914190f7df3bae3520ff6359ad73e22bea1b6e9" } ], "purl": "pkg:npm/glob@7.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/glob@7.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz" }, { "name": "ImportedModules", "value": "glob" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "occurrences": [ { "location": "dist/workspaces/get-workspace-package-paths.js", "line": 9 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 3 }, { "location": "src/workspaces/get-workspace-package-paths.ts", "line": 85 } ] } }, { "group": "", "name": "fs.realpath", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "1504ad2523158caa40db4a2787cb01411994ea4f" } ], "purl": "pkg:npm/fs.realpath@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/fs.realpath@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "spawn-wrap", "version": "1.0.1", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/spawn-wrap@1.0.1", "type": "library", "bom-ref": "pkg:npm/spawn-wrap@1.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "os-homedir", "version": "1.0.1", "scope": "optional", "licenses": [ { "license": { "id": "MIT", "url": "https://opensource.org/licenses/MIT", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/os-homedir@1.0.1", "type": "library", "bom-ref": "pkg:npm/os-homedir@1.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:inBundle", "value": "true" }, { "name": "cdx:npm:inDepBundle", "value": "true" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "strip-bom", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "6219a85616520491f35788bdbf1447a99c7e6b0e" } ], "purl": "pkg:npm/strip-bom@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-bom@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "is-utf8", "version": "0.2.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "4b0da1442104d1b336340e80797e865cf39f7d72" } ], "purl": "pkg:npm/is-utf8@0.2.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-utf8@0.2.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "yargs", "version": "3.32.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "03088e9ebf9e756b69751611d2a5ef591482c995" } ], "purl": "pkg:npm/yargs@3.32.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/yargs/-/yargs-3.32.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/yargs@3.32.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/yargs/-/yargs-3.32.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "camelcase", "version": "2.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7c1d16d679a1bbe59ca02cacecfb011e201f5a1f" } ], "purl": "pkg:npm/camelcase@2.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/camelcase@2.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "cliui", "version": "3.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "120601537a916d29940f934da3b48d585a39213d" } ], "purl": "pkg:npm/cliui@3.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/cliui@3.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "string-width", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3" } ], "purl": "pkg:npm/string-width@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string-width@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "code-point-at", "version": "1.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77" } ], "purl": "pkg:npm/code-point-at@1.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/code-point-at@1.1.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "is-fullwidth-code-point", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb" } ], "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "number-is-nan", "version": "1.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "097b602b53422a522c1afb8790318336941a011d" } ], "purl": "pkg:npm/number-is-nan@1.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/number-is-nan@1.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "wrap-ansi", "version": "2.1.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85" } ], "purl": "pkg:npm/wrap-ansi@2.1.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/wrap-ansi@2.1.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "os-locale", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9" } ], "purl": "pkg:npm/os-locale@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/os-locale@1.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "lcid", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "308accafa0bc483a3867b4b6f2b9506251d1b835" } ], "purl": "pkg:npm/lcid@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/lcid@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "invert-kv", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6" } ], "purl": "pkg:npm/invert-kv@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/invert-kv@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "window-size", "version": "0.1.4", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "f8e1aa1ee5a53ec5bf151ffa09742a6ad7697876" } ], "purl": "pkg:npm/window-size@0.1.4", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.4.tgz" } ], "type": "library", "bom-ref": "pkg:npm/window-size@0.1.4", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.4.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/window-size" }, { "name": "cdx:npm:bin", "value": "window-size" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "y18n", "version": "3.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "b866475e41e7845d1779e00f82729f3efd5b80a018c95be634bd7194ab0f6193da207c46b62da11eabce090bfbd5732c2f1bb54237ab824aa88149e6b390f761" } ], "purl": "pkg:npm/y18n@3.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/y18n/-/y18n-3.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/y18n@3.2.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/y18n/-/y18n-3.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "only-shallow", "version": "1.2.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "71cecedba9324bc0518aef10ec080d3249dc2465" } ], "purl": "pkg:npm/only-shallow@1.2.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/only-shallow/-/only-shallow-1.2.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/only-shallow@1.2.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/only-shallow/-/only-shallow-1.2.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "opener", "version": "1.5.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "babe5421dcb0e58ef2123f702f386a5e2cba199dccc31d32188fb9b0c9f6af4374bf770a26f526147e723cff965e1f5ed317f2cf2257f790fc974f3c0cd163ec" } ], "purl": "pkg:npm/opener@1.5.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/opener/-/opener-1.5.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/opener@1.5.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/opener/-/opener-1.5.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/opener" }, { "name": "cdx:npm:bin", "value": "opener" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "2.3.7", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "11b868f0ae2321b1c0c67bb18bba38d8ead9805fd94cd72c663ea744ac949a484b16af021c8b69fdfcba85066e6663ff9f7c99f550546e9e33cff997f219983f" } ], "purl": "pkg:npm/readable-stream@2.3.7", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@2.3.7", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "isarray", "version": "1.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "bb935d48582cba168c06834957a54a3e07124f11" } ], "purl": "pkg:npm/isarray@1.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/isarray@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "process-nextick-args", "version": "2.0.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a" } ], "purl": "pkg:npm/process-nextick-args@2.0.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/process-nextick-args@2.0.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "safe-buffer", "version": "5.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa" } ], "purl": "pkg:npm/safe-buffer@5.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/safe-buffer@5.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "string_decoder", "version": "1.1.1", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2" } ], "purl": "pkg:npm/string_decoder@1.1.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string_decoder@1.1.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "util-deprecate", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf" } ], "purl": "pkg:npm/util-deprecate@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/util-deprecate@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "supports-color", "version": "1.3.1", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "15758df09d8ff3b4acc307539fabe27095e1042d" } ], "purl": "pkg:npm/supports-color@1.3.1", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.3.1.tgz" } ], "type": "library", "bom-ref": "pkg:npm/supports-color@1.3.1", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.3.1.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/supports-color" }, { "name": "cdx:npm:bin", "value": "supports-color" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tap-mocha-reporter", "version": "0.0.27", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "b2f72f3e1e8ba780ee02918fcdeb3a40da8018f7" } ], "purl": "pkg:npm/tap-mocha-reporter@0.0.27", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tap-mocha-reporter/-/tap-mocha-reporter-0.0.27.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tap-mocha-reporter@0.0.27", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tap-mocha-reporter/-/tap-mocha-reporter-0.0.27.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/tap-mocha-reporter" }, { "name": "cdx:npm:bin", "value": "tap-mocha-reporter" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] }, "tags": [ "test" ] }, { "group": "", "name": "color-support", "version": "1.1.3", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246" } ], "purl": "pkg:npm/color-support@1.1.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/color-support@1.1.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/color-support" }, { "name": "cdx:npm:bin", "value": "color-support" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "2.6.9", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730" } ], "purl": "pkg:npm/debug@2.6.9", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@2.6.9", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "ms", "version": "2.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5608aeadfc00be6c2901df5f9861788de0d597c8" } ], "purl": "pkg:npm/ms@2.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ms@2.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "diff", "version": "1.4.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7f28d2eb9ee7b15a97efd89ce63dcfdaa3ccbabf" } ], "purl": "pkg:npm/diff@1.4.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/diff@1.4.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tap-parser", "version": "1.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "120c5089c88c3c8a793ef288867de321e18f8c22" } ], "purl": "pkg:npm/tap-parser@1.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tap-parser/-/tap-parser-1.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tap-parser@1.3.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tap-parser/-/tap-parser-1.3.2.tgz" }, { "name": "cdx:npm:binPaths", "value": "/app/packages/fs-detectors/test/fixtures/25-multiple-lock-files-yarn/node_modules/.bin/tap-parser" }, { "name": "cdx:npm:bin", "value": "tap-parser" }, { "name": "cdx:npm:has_binary", "value": "true" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] }, "tags": [ "parse" ] }, { "group": "", "name": "events-to-array", "version": "1.1.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "2d41f563e1fe400ed4962fe1a4d5c6a7539df7f6" } ], "purl": "pkg:npm/events-to-array@1.1.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/events-to-array/-/events-to-array-1.1.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/events-to-array@1.1.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/events-to-array/-/events-to-array-1.1.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "unicode-length", "version": "1.0.3", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "5ada7a7fed51841a418a328cf149478ac8358abb" } ], "purl": "pkg:npm/unicode-length@1.0.3", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/unicode-length/-/unicode-length-1.0.3.tgz" } ], "type": "library", "bom-ref": "pkg:npm/unicode-length@1.0.3", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/unicode-length/-/unicode-length-1.0.3.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "readable-stream", "version": "1.1.14", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "7cf4c54ef648e3813084c636dd2079e166c081d9" } ], "purl": "pkg:npm/readable-stream@1.1.14", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "type": "library", "bom-ref": "pkg:npm/readable-stream@1.1.14", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "tmatch", "version": "1.0.2", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "458c7948de0bd522c781fc41235769aa3c447257" } ], "purl": "pkg:npm/tmatch@1.0.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/tmatch/-/tmatch-1.0.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/tmatch@1.0.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/tmatch/-/tmatch-1.0.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/package-lock.json" } ] } }, { "group": "", "name": "npm-workspace-a21", "version": "1.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-workspace-a21@1.0.0", "type": "library", "bom-ref": "pkg:npm/npm-workspace-a21@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/a/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "cdx:npm:isRegistryDependency", "value": "false" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/21-npm-workspaces/a/package-lock.json" } ], "concludedValue": "test/fixtures/21-npm-workspaces/a/package-lock.json" } ] } }, { "group": "", "name": "debug", "version": "4.3.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "98ea7cc0a72f8fb5f10bbf332e0c3f640fba4d2824a04d82fe27a7b618510f6f7c4fb50dc0083d7620692d1c42d2639eccb978074c55eccd1c08ee8ffced1787" } ], "purl": "pkg:npm/debug@4.3.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/debug/-/debug-4.3.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/debug@4.3.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/debug/-/debug-4.3.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/21-npm-workspaces/package-lock.json" } ], "concludedValue": "test/fixtures/21-npm-workspaces/package-lock.json" } ] } }, { "group": "", "name": "npm-workspace-b21", "version": "1.0.0", "scope": "optional", "licenses": [ { "license": { "id": "ISC", "url": "https://opensource.org/licenses/ISC", "properties": [ { "name": "cdx:license:category", "value": "Permissive" }, { "name": "cdx:license:foss", "value": "true" }, { "name": "cdx:license:osiApproved", "value": "true" }, { "name": "cdx:license:fsfLibre", "value": "true" }, { "name": "cdx:license:deprecated", "value": "false" } ] } } ], "purl": "pkg:npm/npm-workspace-b21@1.0.0", "type": "library", "bom-ref": "pkg:npm/npm-workspace-b21@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/b/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "cdx:npm:isRegistryDependency", "value": "false" }, { "name": "cdx:license:category", "value": "Permissive" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/21-npm-workspaces/b/package-lock.json" } ], "concludedValue": "test/fixtures/21-npm-workspaces/b/package-lock.json" } ] } }, { "group": "", "name": "ansi-regex", "version": "3.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-1", "content": "ed0317c322064f79466c02966bddb605ab37d998" } ], "purl": "pkg:npm/ansi-regex@3.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@3.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/21-npm-workspaces/package-lock.json" } ], "concludedValue": "test/fixtures/21-npm-workspaces/package-lock.json" } ] } }, { "group": "", "name": "string-width", "version": "4.2.2", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "5c125b4f737826156e9971347a82d4f430a371a17dd8a2cda939850a71b5a5ff1db94c451b0b4fe800fa9e48f0f5adc876246d2f7136c37243884ff18b7bce78" } ], "purl": "pkg:npm/string-width@4.2.2", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.2.tgz" } ], "type": "library", "bom-ref": "pkg:npm/string-width@4.2.2", "properties": [ { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/string-width/-/string-width-4.2.2.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/21-npm-workspaces/package-lock.json" } ], "concludedValue": "test/fixtures/21-npm-workspaces/package-lock.json" } ] } }, { "group": "", "name": "strip-ansi", "version": "6.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "02ebca4eb4df40d60d21cb5b4752bf6064d1d7be7a1b270fb20edbf5b755f43baababe20bfa68aa875da87aed9f08992ed6133e5055c3ad95f5b6ad912e82deb" } ], "purl": "pkg:npm/strip-ansi@6.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/strip-ansi@6.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/21-npm-workspaces/package-lock.json" } ], "concludedValue": "test/fixtures/21-npm-workspaces/package-lock.json" } ] } }, { "group": "", "name": "ansi-regex", "version": "5.0.0", "scope": "optional", "hashes": [ { "alg": "SHA-512", "content": "6d8e9f8f9e8e510d215352a314d0d0b8915ecea29dac0c857487af0038aaad61f04a56e604d307a796a4d9fe343e6f094c5c8cda6ab1906ea78241ced757ff96" } ], "purl": "pkg:npm/ansi-regex@5.0.0", "externalReferences": [ { "type": "distribution", "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.0.tgz" } ], "type": "library", "bom-ref": "pkg:npm/ansi-regex@5.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/21-npm-workspaces/package-lock.json" }, { "name": "cdx:npm:package:development", "value": "true" }, { "name": "cdx:npm:package:optional", "value": "true" }, { "name": "cdx:npm:package:peer", "value": "true" }, { "name": "ResolvedUrl", "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.0.tgz" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 1, "methods": [ { "technique": "manifest-analysis", "confidence": 1, "value": "test/fixtures/21-npm-workspaces/package-lock.json" } ], "concludedValue": "test/fixtures/21-npm-workspaces/package-lock.json" } ] } }, { "group": "", "name": "a31", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/a31@1.0.0", "type": "library", "bom-ref": "pkg:npm/a31@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/a31@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/31-turborepo-in-package-json/a/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/31-turborepo-in-package-json/a/package.json" } ], "concludedValue": "test/fixtures/31-turborepo-in-package-json/a/package.json" } ] } }, { "group": "", "name": "b31", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/b31@1.0.0", "type": "library", "bom-ref": "pkg:npm/b31@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/31-turborepo-in-package-json/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/b31@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/31-turborepo-in-package-json/b/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/31-turborepo-in-package-json/b/package.json" } ], "concludedValue": "test/fixtures/31-turborepo-in-package-json/b/package.json" } ] } }, { "group": "", "name": "frontend-a30", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/frontend-a30@1.0.0", "type": "library", "bom-ref": "pkg:npm/frontend-a30@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-a30@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/a/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/a/package.json" } ], "concludedValue": "test/fixtures/30-double-nested-workspaces/packages/frontend/a/package.json" } ] } }, { "group": "", "name": "frontend-b30", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/frontend-b30@1.0.0", "type": "library", "bom-ref": "pkg:npm/frontend-b30@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-b30@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/b/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/30-double-nested-workspaces/packages/frontend/b/package.json" } ], "concludedValue": "test/fixtures/30-double-nested-workspaces/packages/frontend/b/package.json" } ] } }, { "group": "", "name": "frontend-a29", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/frontend-a29@1.0.0", "type": "library", "bom-ref": "pkg:npm/frontend-a29@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-a29@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/a/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/29-nested-workspaces/frontend/a/package.json" } ], "concludedValue": "test/fixtures/29-nested-workspaces/frontend/a/package.json" } ] } }, { "group": "", "name": "frontend-b29", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/frontend-b29@1.0.0", "type": "library", "bom-ref": "pkg:npm/frontend-b29@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/frontend-b29@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/29-nested-workspaces/frontend/b/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/29-nested-workspaces/frontend/b/package.json" } ], "concludedValue": "test/fixtures/29-nested-workspaces/frontend/b/package.json" } ] } }, { "group": "", "name": "fs-a28", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/fs-a28@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs-a28@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a28@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/a/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/28-turborepo-with-yarn-workspaces/a/package.json" } ], "concludedValue": "test/fixtures/28-turborepo-with-yarn-workspaces/a/package.json" } ] } }, { "group": "", "name": "fs-b28", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/fs-b28@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs-b28@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b28@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/28-turborepo-with-yarn-workspaces/b/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/28-turborepo-with-yarn-workspaces/b/package.json" } ], "concludedValue": "test/fixtures/28-turborepo-with-yarn-workspaces/b/package.json" } ] } }, { "group": "", "name": "fs-a27", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/fs-a27@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs-a27@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a27@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/27-yarn-workspaces/a/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/27-yarn-workspaces/a/package.json" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/a/package.json" } ] } }, { "group": "", "name": "fs-b27", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/fs-b27@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs-b27@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/27-yarn-workspaces/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b27@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/27-yarn-workspaces/b/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/27-yarn-workspaces/b/package.json" } ], "concludedValue": "test/fixtures/27-yarn-workspaces/b/package.json" } ] } }, { "group": "", "name": "fs-a25", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/fs-a25@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs-a25@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/a/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-a25@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/a/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/25-multiple-lock-files-yarn/a/package.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/a/package.json" } ] } }, { "group": "", "name": "fs-b25", "version": "1.0.0", "scope": "optional", "purl": "pkg:npm/fs-b25@1.0.0", "type": "library", "bom-ref": "pkg:npm/fs-b25@1.0.0", "properties": [ { "name": "SrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/b/package.json" }, { "name": "internal:workspaceRef", "value": "pkg:npm/fs-b25@1.0.0" }, { "name": "cdx:npm:is_workspace", "value": "true" }, { "name": "internal:workspaceSrcFile", "value": "test/fixtures/25-multiple-lock-files-yarn/b/package.json" } ], "evidence": { "identity": [ { "field": "purl", "confidence": 0.7, "methods": [ { "technique": "manifest-analysis", "confidence": 0.7, "value": "test/fixtures/25-multiple-lock-files-yarn/b/package.json" } ], "concludedValue": "test/fixtures/25-multiple-lock-files-yarn/b/package.json" } ] } } ], "dependencies": [ { "ref": "pkg:npm/55-pnpm-with-lockfile", "dependsOn": [ "pkg:npm/ansi-regex@3.0.1", "pkg:npm/ansi-regex@5.0.1", "pkg:npm/ansi-styles@4.3.0", "pkg:npm/camelcase@5.3.1", "pkg:npm/cliui@6.0.0", "pkg:npm/color-convert@2.0.1", "pkg:npm/color-name@1.1.4", "pkg:npm/cowsay@1.5.0", "pkg:npm/debug@4.3.4", "pkg:npm/decamelize@1.2.0", "pkg:npm/emoji-regex@8.0.0", "pkg:npm/find-up@4.1.0", "pkg:npm/get-caller-file@2.0.5", "pkg:npm/get-stdin@8.0.0", "pkg:npm/is-fullwidth-code-point@2.0.0", "pkg:npm/is-fullwidth-code-point@3.0.0", "pkg:npm/locate-path@5.0.0", "pkg:npm/ms@2.1.2", "pkg:npm/once@1.4.0", "pkg:npm/p-limit@2.3.0", "pkg:npm/p-locate@4.1.0", "pkg:npm/p-try@2.2.0", "pkg:npm/path-exists@4.0.0", "pkg:npm/require-directory@2.1.1", "pkg:npm/require-main-filename@2.0.0", "pkg:npm/set-blocking@2.0.0", "pkg:npm/string-width@2.1.1", "pkg:npm/string-width@4.2.3", "pkg:npm/strip-ansi@4.0.0", "pkg:npm/strip-ansi@6.0.1", "pkg:npm/strip-final-newline@2.0.0", "pkg:npm/which-module@2.0.0", "pkg:npm/wrap-ansi@6.2.0", "pkg:npm/wrappy@1.0.2", "pkg:npm/y18n@4.0.3", "pkg:npm/yargs-parser@18.1.3", "pkg:npm/yargs@15.4.1" ] }, { "ref": "pkg:npm/once@1.4.0", "dependsOn": [ "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/wrappy@1.0.2", "dependsOn": [ "pkg:npm/tap@2.3.4" ] }, { "ref": "pkg:npm/ansi-regex@3.0.1", "dependsOn": [] }, { "ref": "pkg:npm/ansi-regex@5.0.1", "dependsOn": [] }, { "ref": "pkg:npm/ansi-styles@4.3.0", "dependsOn": [ "pkg:npm/color-convert@2.0.1" ] }, { "ref": "pkg:npm/camelcase@5.3.1", "dependsOn": [] }, { "ref": "pkg:npm/cliui@6.0.0", "dependsOn": [ "pkg:npm/string-width@4.2.2", "pkg:npm/string-width@4.2.3", "pkg:npm/strip-ansi@6.0.0", "pkg:npm/strip-ansi@6.0.1", "pkg:npm/wrap-ansi@6.2.0" ] }, { "ref": "pkg:npm/color-convert@2.0.1", "dependsOn": [ "pkg:npm/color-name@1.1.4" ] }, { "ref": "pkg:npm/color-name@1.1.4", "dependsOn": [] }, { "ref": "pkg:npm/cowsay@1.5.0", "dependsOn": [ "pkg:npm/get-stdin@8.0.0", "pkg:npm/string-width@2.1.1", "pkg:npm/strip-final-newline@2.0.0", "pkg:npm/yargs@15.4.1" ] }, { "ref": "pkg:npm/debug@4.3.4", "dependsOn": [ "pkg:npm/ms@2.1.2" ] }, { "ref": "pkg:npm/decamelize@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/emoji-regex@8.0.0", "dependsOn": [] }, { "ref": "pkg:npm/find-up@4.1.0", "dependsOn": [ "pkg:npm/locate-path@5.0.0", "pkg:npm/path-exists@4.0.0" ] }, { "ref": "pkg:npm/get-caller-file@2.0.5", "dependsOn": [] }, { "ref": "pkg:npm/get-stdin@8.0.0", "dependsOn": [] }, { "ref": "pkg:npm/is-fullwidth-code-point@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/is-fullwidth-code-point@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/locate-path@5.0.0", "dependsOn": [ "pkg:npm/p-locate@4.1.0" ] }, { "ref": "pkg:npm/ms@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/p-limit@2.3.0", "dependsOn": [ "pkg:npm/p-try@2.2.0" ] }, { "ref": "pkg:npm/p-locate@4.1.0", "dependsOn": [ "pkg:npm/p-limit@2.3.0" ] }, { "ref": "pkg:npm/p-try@2.2.0", "dependsOn": [] }, { "ref": "pkg:npm/path-exists@4.0.0", "dependsOn": [] }, { "ref": "pkg:npm/require-directory@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/require-main-filename@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/set-blocking@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/string-width@2.1.1", "dependsOn": [ "pkg:npm/is-fullwidth-code-point@2.0.0", "pkg:npm/strip-ansi@4.0.0" ] }, { "ref": "pkg:npm/string-width@4.2.3", "dependsOn": [ "pkg:npm/emoji-regex@8.0.0", "pkg:npm/is-fullwidth-code-point@3.0.0", "pkg:npm/strip-ansi@6.0.1" ] }, { "ref": "pkg:npm/strip-ansi@4.0.0", "dependsOn": [ "pkg:npm/ansi-regex@3.0.0", "pkg:npm/ansi-regex@3.0.1" ] }, { "ref": "pkg:npm/strip-ansi@6.0.1", "dependsOn": [ "pkg:npm/ansi-regex@5.0.1" ] }, { "ref": "pkg:npm/strip-final-newline@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/which-module@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/wrap-ansi@6.2.0", "dependsOn": [ "pkg:npm/ansi-styles@4.3.0", "pkg:npm/string-width@4.2.2", "pkg:npm/string-width@4.2.3", "pkg:npm/strip-ansi@6.0.0", "pkg:npm/strip-ansi@6.0.1" ] }, { "ref": "pkg:npm/y18n@4.0.3", "dependsOn": [] }, { "ref": "pkg:npm/yargs-parser@18.1.3", "dependsOn": [ "pkg:npm/camelcase@5.3.1", "pkg:npm/decamelize@1.2.0" ] }, { "ref": "pkg:npm/yargs@15.4.1", "dependsOn": [ "pkg:npm/cliui@6.0.0", "pkg:npm/decamelize@1.2.0", "pkg:npm/find-up@4.1.0", "pkg:npm/get-caller-file@2.0.5", "pkg:npm/require-directory@2.1.1", "pkg:npm/require-main-filename@2.0.0", "pkg:npm/set-blocking@2.0.0", "pkg:npm/string-width@4.2.2", "pkg:npm/string-width@4.2.3", "pkg:npm/which-module@2.0.0", "pkg:npm/y18n@4.0.3", "pkg:npm/yargs-parser@18.1.3" ] }, { "ref": "pkg:npm/exeggcute@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/turbo-npm-root-proj", "dependsOn": [] }, { "ref": "pkg:npm/turbo-npm", "dependsOn": [] }, { "ref": "pkg:npm/51-npm-with-lockfile", "dependsOn": [] }, { "ref": "pkg:npm/26-multiple-lock-files-pnpm", "dependsOn": [ "pkg:npm/once@1.4.0" ] }, { "ref": "pkg:npm/core-util-is@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/inherits@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/isarray@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@0.10.31", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@1.0.34", "dependsOn": [ "pkg:npm/core-util-is@1.0.3", "pkg:npm/inherits@2.0.4", "pkg:npm/isarray@0.0.1", "pkg:npm/string_decoder@0.10.31" ] }, { "ref": "pkg:npm/bl@0.9.5", "dependsOn": [ "pkg:npm/readable-stream@1.0.34" ] }, { "ref": "pkg:npm/caseless@0.6.0", "dependsOn": [] }, { "ref": "pkg:npm/forever-agent@0.5.2", "dependsOn": [] }, { "ref": "pkg:npm/json-stringify-safe@5.0.1", "dependsOn": [] }, { "ref": "pkg:npm/mime-types@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/node-uuid@1.4.8", "dependsOn": [] }, { "ref": "pkg:npm/qs@1.2.2", "dependsOn": [] }, { "ref": "pkg:npm/tunnel-agent@0.4.3", "dependsOn": [] }, { "ref": "pkg:npm/aws-sign2@0.5.0", "dependsOn": [] }, { "ref": "pkg:npm/async@0.9.2", "dependsOn": [] }, { "ref": "pkg:npm/delayed-stream@0.0.5", "dependsOn": [] }, { "ref": "pkg:npm/combined-stream@0.0.7", "dependsOn": [ "pkg:npm/delayed-stream@0.0.5" ] }, { "ref": "pkg:npm/mime@1.2.11", "dependsOn": [] }, { "ref": "pkg:npm/form-data@0.1.4", "dependsOn": [ "pkg:npm/async@0.9.2", "pkg:npm/combined-stream@0.0.7", "pkg:npm/mime@1.2.11" ] }, { "ref": "pkg:npm/hoek@0.9.1", "dependsOn": [] }, { "ref": "pkg:npm/boom@0.4.2", "dependsOn": [ "pkg:npm/hoek@0.9.1" ] }, { "ref": "pkg:npm/cryptiles@0.2.2", "dependsOn": [ "pkg:npm/boom@0.4.2" ] }, { "ref": "pkg:npm/sntp@0.2.4", "dependsOn": [ "pkg:npm/hoek@0.9.1" ] }, { "ref": "pkg:npm/hawk@1.1.1", "dependsOn": [ "pkg:npm/boom@0.4.2", "pkg:npm/cryptiles@0.2.2", "pkg:npm/hoek@0.9.1", "pkg:npm/sntp@0.2.4" ] }, { "ref": "pkg:npm/asn1@0.1.11", "dependsOn": [] }, { "ref": "pkg:npm/assert-plus@0.1.5", "dependsOn": [] }, { "ref": "pkg:npm/ctype@0.5.3", "dependsOn": [] }, { "ref": "pkg:npm/http-signature@0.10.1", "dependsOn": [ "pkg:npm/asn1@0.1.11", "pkg:npm/assert-plus@0.1.5", "pkg:npm/ctype@0.5.3" ] }, { "ref": "pkg:npm/oauth-sign@0.4.0", "dependsOn": [] }, { "ref": "pkg:npm/stringstream@0.0.6", "dependsOn": [] }, { "ref": "pkg:npm/psl@1.8.0", "dependsOn": [] }, { "ref": "pkg:npm/punycode@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/universalify@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/tough-cookie@4.0.0", "dependsOn": [ "pkg:npm/psl@1.8.0", "pkg:npm/punycode@2.1.1", "pkg:npm/universalify@0.1.2" ] }, { "ref": "pkg:npm/request@2.42.0", "dependsOn": [ "pkg:npm/aws-sign2@0.5.0", "pkg:npm/bl@0.9.5", "pkg:npm/caseless@0.6.0", "pkg:npm/forever-agent@0.5.2", "pkg:npm/form-data@0.1.4", "pkg:npm/hawk@1.1.1", "pkg:npm/http-signature@0.10.1", "pkg:npm/json-stringify-safe@5.0.1", "pkg:npm/mime-types@1.0.2", "pkg:npm/node-uuid@1.4.8", "pkg:npm/oauth-sign@0.4.0", "pkg:npm/qs@1.2.2", "pkg:npm/stringstream@0.0.6", "pkg:npm/tough-cookie@4.0.0", "pkg:npm/tunnel-agent@0.4.3" ] }, { "ref": "pkg:npm/deep-equal@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/defined@0.0.0", "dependsOn": [] }, { "ref": "pkg:npm/jsonify@0.0.0", "dependsOn": [] }, { "ref": "pkg:npm/through@2.3.8", "dependsOn": [] }, { "ref": "pkg:npm/resumer@0.0.0", "dependsOn": [ "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/split@0.2.10", "dependsOn": [ "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/duplexer@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/stream-combiner@0.0.4", "dependsOn": [ "pkg:npm/duplexer@0.1.2" ] }, { "ref": "pkg:npm/tape@2.3.0", "dependsOn": [ "pkg:npm/deep-equal@0.1.2", "pkg:npm/defined@0.0.0", "pkg:npm/inherits@2.0.4", "pkg:npm/jsonify@0.0.0", "pkg:npm/resumer@0.0.0", "pkg:npm/split@0.2.10", "pkg:npm/stream-combiner@0.0.4", "pkg:npm/through@2.3.8" ] }, { "ref": "pkg:npm/urlgrey@0.4.0", "dependsOn": [ "pkg:npm/tape@2.3.0" ] }, { "ref": "pkg:npm/codecov.io@0.1.6", "dependsOn": [ "pkg:npm/request@2.42.0", "pkg:npm/urlgrey@0.4.0" ] }, { "ref": "pkg:npm/sprintf-js@1.0.3", "dependsOn": [] }, { "ref": "pkg:npm/argparse@1.0.10", "dependsOn": [ "pkg:npm/sprintf-js@1.0.3" ] }, { "ref": "pkg:npm/esprima@2.7.3", "dependsOn": [] }, { "ref": "pkg:npm/js-yaml@3.6.1", "dependsOn": [ "pkg:npm/argparse@1.0.10", "pkg:npm/esprima@2.7.3" ] }, { "ref": "pkg:npm/lcov-parse@0.0.10", "dependsOn": [] }, { "ref": "pkg:npm/log-driver@1.2.5", "dependsOn": [] }, { "ref": "pkg:npm/minimist@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/aws-sign2@0.6.0", "dependsOn": [] }, { "ref": "pkg:npm/aws4@1.11.0", "dependsOn": [] }, { "ref": "pkg:npm/caseless@0.11.0", "dependsOn": [] }, { "ref": "pkg:npm/delayed-stream@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/combined-stream@1.0.8", "dependsOn": [ "pkg:npm/delayed-stream@1.0.0" ] }, { "ref": "pkg:npm/extend@3.0.2", "dependsOn": [] }, { "ref": "pkg:npm/forever-agent@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/asynckit@0.4.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-db@1.52.0", "dependsOn": [] }, { "ref": "pkg:npm/mime-types@2.1.35", "dependsOn": [ "pkg:npm/mime-db@1.52.0" ] }, { "ref": "pkg:npm/form-data@2.1.4", "dependsOn": [ "pkg:npm/asynckit@0.4.0", "pkg:npm/combined-stream@1.0.8", "pkg:npm/mime-types@2.1.35" ] }, { "ref": "pkg:npm/ansi-styles@2.2.1", "dependsOn": [] }, { "ref": "pkg:npm/escape-string-regexp@1.0.5", "dependsOn": [] }, { "ref": "pkg:npm/ansi-regex@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/has-ansi@2.0.0", "dependsOn": [ "pkg:npm/ansi-regex@2.1.1" ] }, { "ref": "pkg:npm/strip-ansi@3.0.1", "dependsOn": [ "pkg:npm/ansi-regex@2.1.1" ] }, { "ref": "pkg:npm/supports-color@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/chalk@1.1.3", "dependsOn": [ "pkg:npm/ansi-styles@2.2.1", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/has-ansi@2.0.0", "pkg:npm/strip-ansi@3.0.1", "pkg:npm/supports-color@2.0.0" ] }, { "ref": "pkg:npm/commander@2.20.3", "dependsOn": [] }, { "ref": "pkg:npm/is-property@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/generate-function@2.3.1", "dependsOn": [ "pkg:npm/is-property@1.0.2" ] }, { "ref": "pkg:npm/generate-object-property@1.2.0", "dependsOn": [ "pkg:npm/is-property@1.0.2" ] }, { "ref": "pkg:npm/is-my-ip-valid@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/jsonpointer@5.0.0", "dependsOn": [] }, { "ref": "pkg:npm/xtend@4.0.2", "dependsOn": [] }, { "ref": "pkg:npm/is-my-json-valid@2.20.6", "dependsOn": [ "pkg:npm/generate-function@2.3.1", "pkg:npm/generate-object-property@1.2.0", "pkg:npm/is-my-ip-valid@1.0.1", "pkg:npm/jsonpointer@5.0.0", "pkg:npm/xtend@4.0.2" ] }, { "ref": "pkg:npm/pinkie@2.0.4", "dependsOn": [] }, { "ref": "pkg:npm/pinkie-promise@2.0.1", "dependsOn": [ "pkg:npm/pinkie@2.0.4" ] }, { "ref": "pkg:npm/har-validator@2.0.6", "dependsOn": [ "pkg:npm/chalk@1.1.3", "pkg:npm/commander@2.20.3", "pkg:npm/is-my-json-valid@2.20.6", "pkg:npm/pinkie-promise@2.0.1" ] }, { "ref": "pkg:npm/hoek@2.16.3", "dependsOn": [] }, { "ref": "pkg:npm/boom@2.10.1", "dependsOn": [ "pkg:npm/hoek@2.16.3" ] }, { "ref": "pkg:npm/cryptiles@2.0.5", "dependsOn": [ "pkg:npm/boom@2.10.1" ] }, { "ref": "pkg:npm/sntp@1.0.9", "dependsOn": [ "pkg:npm/hoek@2.16.3" ] }, { "ref": "pkg:npm/hawk@3.1.3", "dependsOn": [ "pkg:npm/boom@2.10.1", "pkg:npm/cryptiles@2.0.5", "pkg:npm/hoek@2.16.3", "pkg:npm/sntp@1.0.9" ] }, { "ref": "pkg:npm/assert-plus@0.2.0", "dependsOn": [] }, { "ref": "pkg:npm/assert-plus@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/extsprintf@1.3.0", "dependsOn": [] }, { "ref": "pkg:npm/json-schema@0.4.0", "dependsOn": [] }, { "ref": "pkg:npm/core-util-is@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/verror@1.10.0", "dependsOn": [ "pkg:npm/assert-plus@1.0.0", "pkg:npm/core-util-is@1.0.2", "pkg:npm/extsprintf@1.3.0" ] }, { "ref": "pkg:npm/jsprim@1.4.2", "dependsOn": [ "pkg:npm/assert-plus@1.0.0", "pkg:npm/extsprintf@1.3.0", "pkg:npm/json-schema@0.4.0", "pkg:npm/verror@1.10.0" ] }, { "ref": "pkg:npm/safer-buffer@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/asn1@0.2.6", "dependsOn": [ "pkg:npm/safer-buffer@2.1.2" ] }, { "ref": "pkg:npm/tweetnacl@0.14.5", "dependsOn": [] }, { "ref": "pkg:npm/bcrypt-pbkdf@1.0.2", "dependsOn": [ "pkg:npm/tweetnacl@0.14.5" ] }, { "ref": "pkg:npm/dashdash@1.14.1", "dependsOn": [ "pkg:npm/assert-plus@1.0.0" ] }, { "ref": "pkg:npm/jsbn@0.1.1", "dependsOn": [] }, { "ref": "pkg:npm/ecc-jsbn@0.1.2", "dependsOn": [ "pkg:npm/jsbn@0.1.1", "pkg:npm/safer-buffer@2.1.2" ] }, { "ref": "pkg:npm/getpass@0.1.7", "dependsOn": [ "pkg:npm/assert-plus@1.0.0" ] }, { "ref": "pkg:npm/sshpk@1.17.0", "dependsOn": [ "pkg:npm/asn1@0.2.6", "pkg:npm/assert-plus@1.0.0", "pkg:npm/bcrypt-pbkdf@1.0.2", "pkg:npm/dashdash@1.14.1", "pkg:npm/ecc-jsbn@0.1.2", "pkg:npm/getpass@0.1.7", "pkg:npm/jsbn@0.1.1", "pkg:npm/safer-buffer@2.1.2", "pkg:npm/tweetnacl@0.14.5" ] }, { "ref": "pkg:npm/http-signature@1.1.1", "dependsOn": [ "pkg:npm/assert-plus@0.2.0", "pkg:npm/jsprim@1.4.2", "pkg:npm/sshpk@1.17.0" ] }, { "ref": "pkg:npm/is-typedarray@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/isstream@0.1.2", "dependsOn": [] }, { "ref": "pkg:npm/oauth-sign@0.8.2", "dependsOn": [] }, { "ref": "pkg:npm/qs@6.3.3", "dependsOn": [] }, { "ref": "pkg:npm/punycode@1.4.1", "dependsOn": [] }, { "ref": "pkg:npm/tough-cookie@2.3.4", "dependsOn": [ "pkg:npm/punycode@1.4.1" ] }, { "ref": "pkg:npm/uuid@3.4.0", "dependsOn": [] }, { "ref": "pkg:npm/request@2.79.0", "dependsOn": [ "pkg:npm/aws-sign2@0.6.0", "pkg:npm/aws4@1.11.0", "pkg:npm/caseless@0.11.0", "pkg:npm/combined-stream@1.0.8", "pkg:npm/extend@3.0.2", "pkg:npm/forever-agent@0.6.1", "pkg:npm/form-data@2.1.4", "pkg:npm/har-validator@2.0.6", "pkg:npm/hawk@3.1.3", "pkg:npm/http-signature@1.1.1", "pkg:npm/is-typedarray@1.0.0", "pkg:npm/isstream@0.1.2", "pkg:npm/json-stringify-safe@5.0.1", "pkg:npm/mime-types@2.1.35", "pkg:npm/oauth-sign@0.8.2", "pkg:npm/qs@6.3.3", "pkg:npm/stringstream@0.0.6", "pkg:npm/tough-cookie@2.3.4", "pkg:npm/tunnel-agent@0.4.3", "pkg:npm/uuid@3.4.0" ] }, { "ref": "pkg:npm/coveralls@2.13.3", "dependsOn": [ "pkg:npm/js-yaml@3.6.1", "pkg:npm/lcov-parse@0.0.10", "pkg:npm/log-driver@1.2.5", "pkg:npm/minimist@1.2.0", "pkg:npm/request@2.79.0" ] }, { "ref": "pkg:npm/deeper@2.1.0", "dependsOn": [] }, { "ref": "pkg:npm/pseudomap@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/yallist@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/lru-cache@4.1.5", "dependsOn": [ "pkg:npm/pseudomap@1.0.2", "pkg:npm/yallist@2.1.2" ] }, { "ref": "pkg:npm/isexe@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/which@1.3.1", "dependsOn": [ "pkg:npm/isexe@2.0.0" ] }, { "ref": "pkg:npm/cross-spawn@4.0.2", "dependsOn": [ "pkg:npm/lru-cache@4.1.5", "pkg:npm/which@1.3.1" ] }, { "ref": "pkg:npm/signal-exit@3.0.7", "dependsOn": [] }, { "ref": "pkg:npm/foreground-child@1.5.6", "dependsOn": [ "pkg:npm/cross-spawn@4.0.2", "pkg:npm/signal-exit@3.0.7" ] }, { "ref": "pkg:npm/inflight@1.0.6", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/balanced-match@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/concat-map@0.0.1", "dependsOn": [] }, { "ref": "pkg:npm/brace-expansion@1.1.11", "dependsOn": [ "pkg:npm/balanced-match@1.0.2", "pkg:npm/concat-map@0.0.1" ] }, { "ref": "pkg:npm/minimatch@3.1.2", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/path-is-absolute@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/glob@6.0.4", "dependsOn": [ "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.1.2", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/esprima@4.0.1", "dependsOn": [] }, { "ref": "pkg:npm/js-yaml@3.14.1", "dependsOn": [ "pkg:npm/argparse@1.0.10", "pkg:npm/esprima@4.0.1" ] }, { "ref": "pkg:npm/minimist@1.2.6", "dependsOn": [] }, { "ref": "pkg:npm/mkdirp@0.5.6", "dependsOn": [ "pkg:npm/minimist@1.2.6" ] }, { "ref": "pkg:npm/signal-exit@2.1.2", "dependsOn": [] }, { "ref": "pkg:npm/win-spawn@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/foreground-child@1.3.0", "dependsOn": [ "pkg:npm/signal-exit@2.1.2", "pkg:npm/win-spawn@2.0.0" ] }, { "ref": "pkg:npm/glob@5.0.15", "dependsOn": [ "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@2.0.10", "pkg:npm/minimatch@3.1.2", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/abbrev@1.0.9", "dependsOn": [] }, { "ref": "pkg:npm/async@1.5.2", "dependsOn": [] }, { "ref": "pkg:npm/esprima@1.2.5", "dependsOn": [] }, { "ref": "pkg:npm/estraverse@1.9.3", "dependsOn": [] }, { "ref": "pkg:npm/esutils@2.0.3", "dependsOn": [] }, { "ref": "pkg:npm/deep-is@0.1.4", "dependsOn": [] }, { "ref": "pkg:npm/fast-levenshtein@1.0.7", "dependsOn": [] }, { "ref": "pkg:npm/prelude-ls@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/type-check@0.3.2", "dependsOn": [ "pkg:npm/prelude-ls@1.1.2" ] }, { "ref": "pkg:npm/levn@0.2.5", "dependsOn": [ "pkg:npm/prelude-ls@1.1.2", "pkg:npm/type-check@0.3.2" ] }, { "ref": "pkg:npm/wordwrap@0.0.3", "dependsOn": [] }, { "ref": "pkg:npm/optionator@0.5.0", "dependsOn": [ "pkg:npm/deep-is@0.1.4", "pkg:npm/fast-levenshtein@1.0.7", "pkg:npm/levn@0.2.5", "pkg:npm/prelude-ls@1.1.2", "pkg:npm/type-check@0.3.2", "pkg:npm/wordwrap@0.0.3" ] }, { "ref": "pkg:npm/amdefine@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.2.0", "dependsOn": [ "pkg:npm/amdefine@1.0.1" ] }, { "ref": "pkg:npm/escodegen@1.7.1", "dependsOn": [ "pkg:npm/esprima@1.2.5", "pkg:npm/estraverse@1.9.3", "pkg:npm/esutils@2.0.3", "pkg:npm/optionator@0.5.0", "pkg:npm/source-map@0.2.0" ] }, { "ref": "pkg:npm/esprima@2.5.0", "dependsOn": [] }, { "ref": "pkg:npm/minimatch@2.0.10", "dependsOn": [ "pkg:npm/brace-expansion@1.1.11" ] }, { "ref": "pkg:npm/fileset@0.2.1", "dependsOn": [ "pkg:npm/glob@5.0.15", "pkg:npm/minimatch@2.0.10" ] }, { "ref": "pkg:npm/neo-async@2.6.2", "dependsOn": [] }, { "ref": "pkg:npm/source-map@0.6.1", "dependsOn": [] }, { "ref": "pkg:npm/wordwrap@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/uglify-js@3.15.4", "dependsOn": [] }, { "ref": "pkg:npm/handlebars@4.7.7", "dependsOn": [ "pkg:npm/minimist@1.2.6", "pkg:npm/neo-async@2.6.2", "pkg:npm/source-map@0.6.1", "pkg:npm/uglify-js@3.15.4", "pkg:npm/wordwrap@1.0.0" ] }, { "ref": "pkg:npm/nopt@3.0.6", "dependsOn": [ "pkg:npm/abbrev@1.0.9" ] }, { "ref": "pkg:npm/resolve@1.1.7", "dependsOn": [] }, { "ref": "pkg:npm/has-flag@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/supports-color@3.2.3", "dependsOn": [ "pkg:npm/has-flag@1.0.0" ] }, { "ref": "pkg:npm/istanbul@0.3.22", "dependsOn": [ "pkg:npm/abbrev@1.0.9", "pkg:npm/async@1.5.2", "pkg:npm/escodegen@1.7.1", "pkg:npm/esprima@2.5.0", "pkg:npm/fileset@0.2.1", "pkg:npm/handlebars@4.7.7", "pkg:npm/js-yaml@3.14.1", "pkg:npm/mkdirp@0.5.6", "pkg:npm/nopt@3.0.6", "pkg:npm/once@1.4.0", "pkg:npm/resolve@1.1.7", "pkg:npm/supports-color@3.2.3", "pkg:npm/which@1.3.1", "pkg:npm/wordwrap@1.0.0" ] }, { "ref": "pkg:npm/lodash@3.10.1", "dependsOn": [] }, { "ref": "pkg:npm/fs.realpath@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/glob@7.2.0", "dependsOn": [ "pkg:npm/fs.realpath@1.0.0", "pkg:npm/inflight@1.0.6", "pkg:npm/inherits@2.0.4", "pkg:npm/minimatch@3.1.2", "pkg:npm/once@1.4.0", "pkg:npm/path-is-absolute@1.0.1" ] }, { "ref": "pkg:npm/rimraf@2.7.1", "dependsOn": [ "pkg:npm/glob@7.2.0" ] }, { "ref": "pkg:npm/os-homedir@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/spawn-wrap@1.0.1", "dependsOn": [ "pkg:npm/foreground-child@1.3.0", "pkg:npm/mkdirp@0.5.6", "pkg:npm/os-homedir@1.0.1", "pkg:npm/rimraf@2.7.1", "pkg:npm/signal-exit@2.1.2" ] }, { "ref": "pkg:npm/is-utf8@0.2.1", "dependsOn": [] }, { "ref": "pkg:npm/strip-bom@2.0.0", "dependsOn": [ "pkg:npm/is-utf8@0.2.1" ] }, { "ref": "pkg:npm/camelcase@2.1.1", "dependsOn": [] }, { "ref": "pkg:npm/code-point-at@1.1.0", "dependsOn": [] }, { "ref": "pkg:npm/number-is-nan@1.0.1", "dependsOn": [] }, { "ref": "pkg:npm/is-fullwidth-code-point@1.0.0", "dependsOn": [ "pkg:npm/number-is-nan@1.0.1" ] }, { "ref": "pkg:npm/string-width@1.0.2", "dependsOn": [ "pkg:npm/code-point-at@1.1.0", "pkg:npm/is-fullwidth-code-point@1.0.0", "pkg:npm/strip-ansi@3.0.1" ] }, { "ref": "pkg:npm/wrap-ansi@2.1.0", "dependsOn": [ "pkg:npm/string-width@1.0.2", "pkg:npm/strip-ansi@3.0.1" ] }, { "ref": "pkg:npm/cliui@3.2.0", "dependsOn": [ "pkg:npm/string-width@1.0.2", "pkg:npm/strip-ansi@3.0.1", "pkg:npm/wrap-ansi@2.1.0" ] }, { "ref": "pkg:npm/invert-kv@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/lcid@1.0.0", "dependsOn": [ "pkg:npm/invert-kv@1.0.0" ] }, { "ref": "pkg:npm/os-locale@1.4.0", "dependsOn": [ "pkg:npm/lcid@1.0.0" ] }, { "ref": "pkg:npm/window-size@0.1.4", "dependsOn": [] }, { "ref": "pkg:npm/y18n@3.2.2", "dependsOn": [] }, { "ref": "pkg:npm/yargs@3.32.0", "dependsOn": [ "pkg:npm/camelcase@2.1.1", "pkg:npm/cliui@3.2.0", "pkg:npm/decamelize@1.2.0", "pkg:npm/os-locale@1.4.0", "pkg:npm/string-width@1.0.2", "pkg:npm/window-size@0.1.4", "pkg:npm/y18n@3.2.2" ] }, { "ref": "pkg:npm/nyc@3.2.2", "dependsOn": [ "pkg:npm/foreground-child@1.3.0", "pkg:npm/glob@5.0.15", "pkg:npm/istanbul@0.3.22", "pkg:npm/lodash@3.10.1", "pkg:npm/mkdirp@0.5.6", "pkg:npm/rimraf@2.7.1", "pkg:npm/signal-exit@2.1.2", "pkg:npm/spawn-wrap@1.0.1", "pkg:npm/strip-bom@2.0.0", "pkg:npm/yargs@3.32.0" ] }, { "ref": "pkg:npm/only-shallow@1.2.0", "dependsOn": [] }, { "ref": "pkg:npm/opener@1.5.2", "dependsOn": [] }, { "ref": "pkg:npm/isarray@1.0.0", "dependsOn": [] }, { "ref": "pkg:npm/process-nextick-args@2.0.1", "dependsOn": [] }, { "ref": "pkg:npm/safe-buffer@5.1.2", "dependsOn": [] }, { "ref": "pkg:npm/string_decoder@1.1.1", "dependsOn": [ "pkg:npm/safe-buffer@5.1.2" ] }, { "ref": "pkg:npm/util-deprecate@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/readable-stream@2.3.7", "dependsOn": [ "pkg:npm/core-util-is@1.0.3", "pkg:npm/inherits@2.0.4", "pkg:npm/isarray@1.0.0", "pkg:npm/process-nextick-args@2.0.1", "pkg:npm/safe-buffer@5.1.2", "pkg:npm/string_decoder@1.1.1", "pkg:npm/util-deprecate@1.0.2" ] }, { "ref": "pkg:npm/supports-color@1.3.1", "dependsOn": [] }, { "ref": "pkg:npm/color-support@1.1.3", "dependsOn": [] }, { "ref": "pkg:npm/ms@2.0.0", "dependsOn": [] }, { "ref": "pkg:npm/debug@2.6.9", "dependsOn": [ "pkg:npm/ms@2.0.0" ] }, { "ref": "pkg:npm/diff@1.4.0", "dependsOn": [] }, { "ref": "pkg:npm/events-to-array@1.1.2", "dependsOn": [] }, { "ref": "pkg:npm/tap-parser@1.3.2", "dependsOn": [ "pkg:npm/events-to-array@1.1.2", "pkg:npm/inherits@2.0.4", "pkg:npm/js-yaml@3.14.1", "pkg:npm/readable-stream@2.3.7" ] }, { "ref": "pkg:npm/unicode-length@1.0.3", "dependsOn": [ "pkg:npm/punycode@1.4.1", "pkg:npm/strip-ansi@3.0.1" ] }, { "ref": "pkg:npm/readable-stream@1.1.14", "dependsOn": [ "pkg:npm/core-util-is@1.0.3", "pkg:npm/inherits@2.0.4", "pkg:npm/isarray@0.0.1", "pkg:npm/string_decoder@0.10.31" ] }, { "ref": "pkg:npm/tap-mocha-reporter@0.0.27", "dependsOn": [ "pkg:npm/color-support@1.1.3", "pkg:npm/debug@2.6.9", "pkg:npm/diff@1.4.0", "pkg:npm/escape-string-regexp@1.0.5", "pkg:npm/glob@7.2.0", "pkg:npm/js-yaml@3.14.1", "pkg:npm/readable-stream@1.1.14", "pkg:npm/tap-parser@1.3.2", "pkg:npm/unicode-length@1.0.3" ] }, { "ref": "pkg:npm/tmatch@1.0.2", "dependsOn": [] }, { "ref": "pkg:npm/tap@2.3.4", "dependsOn": [ "pkg:npm/codecov.io@0.1.6", "pkg:npm/coveralls@2.13.3", "pkg:npm/deeper@2.1.0", "pkg:npm/foreground-child@1.5.6", "pkg:npm/glob@6.0.4", "pkg:npm/js-yaml@3.14.1", "pkg:npm/mkdirp@0.5.6", "pkg:npm/nyc@3.2.2", "pkg:npm/only-shallow@1.2.0", "pkg:npm/opener@1.5.2", "pkg:npm/readable-stream@2.3.7", "pkg:npm/signal-exit@2.1.2", "pkg:npm/supports-color@1.3.1", "pkg:npm/tap-mocha-reporter@0.0.27", "pkg:npm/tap-parser@1.3.2", "pkg:npm/tmatch@1.0.2" ] }, { "ref": "pkg:npm/25-multiple-lock-files-yarn", "dependsOn": [ "pkg:npm/once@1.4.0", "pkg:npm/wrappy@1.0.2" ] }, { "ref": "pkg:npm/debug@4.3.2", "dependsOn": [ "pkg:npm/ms@2.1.2" ] }, { "ref": "pkg:npm/npm-workspace-a21@1.0.0", "dependsOn": [ "pkg:npm/debug@4.3.2" ] }, { "ref": "pkg:npm/ansi-regex@3.0.0", "dependsOn": [] }, { "ref": "pkg:npm/ansi-regex@5.0.0", "dependsOn": [] }, { "ref": "pkg:npm/strip-ansi@6.0.0", "dependsOn": [ "pkg:npm/ansi-regex@5.0.0" ] }, { "ref": "pkg:npm/string-width@4.2.2", "dependsOn": [ "pkg:npm/emoji-regex@8.0.0", "pkg:npm/is-fullwidth-code-point@3.0.0", "pkg:npm/strip-ansi@6.0.0" ] }, { "ref": "pkg:npm/npm-workspace-b21@1.0.0", "dependsOn": [ "pkg:npm/cowsay@1.5.0" ] }, { "ref": "pkg:npm/21-npm-workspaces", "dependsOn": [ "pkg:npm/npm-workspace-a21@1.0.0", "pkg:npm/npm-workspace-b21@1.0.0" ] } ], "annotations": [ { "bom-ref": "metadata-annotations", "subjects": [ "pkg:npm/55-pnpm-with-lockfile" ], "annotator": { "component": { "group": "@cyclonedx", "name": "cdxgen", "version": "12.8.4", "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4", "type": "application", "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4", "publisher": "OWASP Foundation", "authors": [ { "name": "OWASP Foundation" } ] } }, "timestamp": "2026-09-21T18:56:12Z", "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named '55-pnpm-with-lockfile'. The application also has 12 child modules/components." } ] }