{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:0e786bd7-0ac6-4827-b5de-55bff018c03d",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-21T18:56:15Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "hello-world-ts",
      "group": "",
      "version": "0.0.0",
      "description": "An example using TypeScript in Hydrogen",
      "purl": "pkg:npm/hello-world-ts@0.0.0",
      "bom-ref": "pkg:npm/hello-world-ts@0.0.0",
      "author": "nrajlich",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "dev, build, preview"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "authors": [
            {
              "name": "nrajlich"
            }
          ],
          "group": "",
          "name": "hello-world-js",
          "version": "0.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/hello-world-js@0.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/hello-world-js@0.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        },
        {
          "authors": [
            {
              "name": "nrajlich"
            }
          ],
          "group": "",
          "name": "demo-store-ts",
          "version": "0.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/demo-store-ts@0.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/demo-store-ts@0.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        },
        {
          "authors": [
            {
              "name": "nrajlich"
            }
          ],
          "group": "",
          "name": "demo-store-js",
          "version": "0.0.0",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "url": "https://opensource.org/licenses/MIT",
                "properties": [
                  {
                    "name": "cdx:license:category",
                    "value": "Permissive"
                  },
                  {
                    "name": "cdx:license:foss",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:osiApproved",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:fsfLibre",
                    "value": "true"
                  },
                  {
                    "name": "cdx:license:deprecated",
                    "value": "false"
                  }
                ]
              }
            }
          ],
          "purl": "pkg:npm/demo-store-js@0.0.0",
          "type": "application",
          "bom-ref": "pkg:npm/demo-store-js@0.0.0",
          "properties": [
            {
              "name": "cdx:license:category",
              "value": "Permissive"
            }
          ]
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@ampproject\\n@babel\\n@bugsnag\\n@csstools\\n@fastify\\n@headlessui\\n@heroicons\\n@iarna\\n@jridgewell\\n@kwsites\\n@miniflare\\n@nodelib\\n@oclif\\n@polka\\n@rollup\\n@shopify\\n@sindresorhus\\n@szmarczak\\n@tailwindcss\\n@types\\n@vitejs\\n@xobotyi"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "test/fixtures/demo-store-js/package-lock.json\\ntest/fixtures/demo-store-ts/package-lock.json\\ntest/fixtures/hello-world-js/package-lock.json\\ntest/fixtures/hello-world-ts/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@shopify",
      "name": "hydrogen",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "753f912727e9eef71ae06bf5d27a119d64e498730e630706239ed0c49dd178dd43d976db91269dae001896ed0416925d8c2bd5ac4afa7b84336edc79a49398fe"
        }
      ],
      "purl": "pkg:npm/%40shopify/hydrogen@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/hydrogen/-/hydrogen-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/hydrogen@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/hydrogen/-/hydrogen-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react",
      "version": "18.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff722331d6f62fd41b05d5a25b97b73f6fe7a70301694f661c24825333659f464261b71f4ec19b4c9ad4fe419e99d1f6216981da2a19fb3931b66aba834f5f19"
        }
      ],
      "purl": "pkg:npm/react@18.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react/-/react-18.2.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@18.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-18.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "972bb13c6aff59f86b95e9b608bfd472751cd7372a280226043cee918ed8e45ff242235d928ebe7d12debe5c351e03324b0edfeb5d54218e34f04b71452a0add"
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/loose-envify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "loose-envify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/loose-envify"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/loose-envify"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/loose-envify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "18.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e88313ae2526bec8c752336d103b9d65fb83414a165d5c4a1e194419293cd67e18152fabfca97df705e2c25557b4f06d25e9e8cefd8ffa1c43b30f5e03b5e8ea"
        }
      ],
      "purl": "pkg:npm/react-dom@18.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@18.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "scheduler",
      "version": "0.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0adb93866807360ef32195805e2dc0b322330379f8c71eda3728f00b654995d3b62cc5438452beeb7c46aaae82b091f8ad302debf33e3781a16620d83f1f5e53"
        }
      ],
      "purl": "pkg:npm/scheduler@0.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/scheduler@0.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vite",
      "version": "2.9.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02c38101a4f4003ecc85ef03b8afbf904e1a59814cc7f8b464d8bdf2125c9716f87b43a141c65852bbcb8c8690f1ee7d522eedc5cbca322242d727edaa94280f"
        }
      ],
      "purl": "pkg:npm/vite@2.9.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vite/-/vite-2.9.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vite@2.9.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vite/-/vite-2.9.13.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/vite"
        },
        {
          "name": "cdx:npm:bin",
          "value": "vite"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/vite"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/vite"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/vite"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3a375627e4cb6a2b6535fd66535fd66a5156fc20e2d9919e40747913eb1ddc1c3315b18582ed63dd88b9b1d7dc378b8470cf2e4baac10cb558a11b77b8ac5cc"
        }
      ],
      "purl": "pkg:npm/esbuild@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild/-/esbuild-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild/-/esbuild-0.14.48.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/esbuild"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esbuild"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/esbuild"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/esbuild"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/esbuild"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-android-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dda3236e86a9fe4ab0094a465888ec936d13b7156829c93cff84eed7daee6e1eede516b462ba60df432dd505d7962a4e6b3ac471e19e5aead729e1498243ce52"
        }
      ],
      "purl": "pkg:npm/esbuild-android-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-android-64/-/esbuild-android-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-android-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-android-64/-/esbuild-android-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-android-arm64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be9b48dcad301802e20eaf84bd1b99a2d66b26a91890de76f368807dc7df8c8e659861bd1b5b5afc22156ae858e363015f01200c99307a20dc0cc44bcc1642e2"
        }
      ],
      "purl": "pkg:npm/esbuild-android-arm64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-android-arm64/-/esbuild-android-arm64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-android-arm64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-android-arm64/-/esbuild-android-arm64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-darwin-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8064196b8fa169bd956bf670c3de186ec84bb96b5ec8a183dfe12c5689fc1164d68671c5466e4df4d6c02cd6f08bfee143f84cd599b816e1e0fa4e812ec97950"
        }
      ],
      "purl": "pkg:npm/esbuild-darwin-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-darwin-64/-/esbuild-darwin-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-darwin-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-darwin-64/-/esbuild-darwin-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-darwin-arm64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c58e73445e38594fe219f11bd118d26d84b58d1d5e49902b6e3853a78efa39a42d2c936fd0564d10734ea0d8f5772744dc53a91a3c2dd137dcb2f70d8f48b10"
        }
      ],
      "purl": "pkg:npm/esbuild-darwin-arm64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-darwin-arm64/-/esbuild-darwin-arm64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-darwin-arm64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-darwin-arm64/-/esbuild-darwin-arm64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-freebsd-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4d3a5c11c663ac9cf7163864c1d7424a0246126f69ee7b4a0cd407c75ae9d6fe6bf7c0445f2669d8946ccbdd400e2145d9a96f06780da6bfe406c2aec34e8a8"
        }
      ],
      "purl": "pkg:npm/esbuild-freebsd-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-freebsd-64/-/esbuild-freebsd-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-freebsd-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-freebsd-64/-/esbuild-freebsd-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-freebsd-arm64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "817a8a74ef3069b55c62d96e01b8a40c7da3857a7e2a5ab9a020f9a9b572506ead1621a1ac2f687332aadef22baedc1cc4342a2baf870d82bc66b7786c203d1b"
        }
      ],
      "purl": "pkg:npm/esbuild-freebsd-arm64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-freebsd-arm64/-/esbuild-freebsd-arm64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-freebsd-arm64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-freebsd-arm64/-/esbuild-freebsd-arm64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-32",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8211b20df4b6f3dcff2d1799414bae2aaf4a953893b29c4bf12213045405005440fc8908bc3a676670802930a319702652aae83107ca257331ca3240ebd73f9d"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-32@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-32/-/esbuild-linux-32-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-32@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-32/-/esbuild-linux-32-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be78b7a7f829a4b31564b82123ba0ca9b39974698b6db291db75c50112a7b3308806910c103c4e30d20a3e6308b50ae61ff889acbd73f09b769f29d8d1b135ba"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-64/-/esbuild-linux-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-64/-/esbuild-linux-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-arm",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f957d257b0248755d488335782a818d5c50fd62daf8c8f819a5c9745f573e407d5de36e975ef094ece50f6c6206a8ab97167ee29fa1907f42418e23e41c2f54f"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-arm@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-arm/-/esbuild-linux-arm-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-arm@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-arm/-/esbuild-linux-arm-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-arm64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc216c3a5a68c6528f45ebc41eaf1a027b6060662413537dc9160070fca783fa785b2c74b4f47948162cc4b29c80f07d991f1c847121b56633e8467e1f5f7d67"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-arm64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-arm64/-/esbuild-linux-arm64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-arm64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-arm64/-/esbuild-linux-arm64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-mips64le",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72cd2e3a24653e9eb29a49c39e36a30a0bc3312b0bc399924f651787e648ad74e3d887f27f66803f7230e038aa827c982d5d8efefff2581271f967e6284a4d2c"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-mips64le@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-mips64le/-/esbuild-linux-mips64le-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-mips64le@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-mips64le/-/esbuild-linux-mips64le-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-ppc64le",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb6174bc9324b88d1689eff07123c30aa5ef4851042c7ec9b9bc5bee6a56ac0ff83694fefdbca3c43cf4806e91d5626878379f72b31fa41c7818534dd49428ad"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-ppc64le@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-ppc64le/-/esbuild-linux-ppc64le-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-ppc64le@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-ppc64le/-/esbuild-linux-ppc64le-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-riscv64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06668afc67c413ee45dbf403ac85ed78518a9d51c6c659caf4c8dd54a3137efb66b9d8d8de4dadf0db65638a9e98a4a2cdcf90c32a266c659304373beabc5e3c"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-riscv64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-riscv64/-/esbuild-linux-riscv64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-riscv64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-riscv64/-/esbuild-linux-riscv64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-linux-s390x",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b67770ff407d8e208bf8a58aa344d231a526e545812ec7c229575b7cc95bddde4b795f566e28d9f0eadd89af12018bf7f1548958e12de9e0c274ec7c2ea902e2"
        }
      ],
      "purl": "pkg:npm/esbuild-linux-s390x@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-linux-s390x/-/esbuild-linux-s390x-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-linux-s390x@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-linux-s390x/-/esbuild-linux-s390x-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-netbsd-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57d8605dfc1ffd3f74d4baf5c2439fa1ebedc8d92bc6631c447cad89cc9b0541e8a24ce78a930e1e8178d4097af1006ca81c67213084a638dde32028b3bcfd4f"
        }
      ],
      "purl": "pkg:npm/esbuild-netbsd-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-netbsd-64/-/esbuild-netbsd-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-netbsd-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-netbsd-64/-/esbuild-netbsd-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-openbsd-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f881dfe0971b9e7065e13e767a0a2b5cc6ad8a5ff36b46b0ab3836572e850603dc0698ac0d64f6b15cffb4d76b2bd900aa3f86646fe365dace923ef0b2b35328"
        }
      ],
      "purl": "pkg:npm/esbuild-openbsd-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-openbsd-64/-/esbuild-openbsd-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-openbsd-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-openbsd-64/-/esbuild-openbsd-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-sunos-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efb9bc6ecaf9c0ea4e59b1a2f4a4aa0e985caba745789cae9fc4c0fb5d895bf1808f27d3c15b4e9cdf033ade8348f51f115fa5b5530daad5d479378c03197928"
        }
      ],
      "purl": "pkg:npm/esbuild-sunos-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-sunos-64/-/esbuild-sunos-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-sunos-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-sunos-64/-/esbuild-sunos-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-windows-32",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10f811b933cff2f2bd99ac694c60dee654a82011c628efc0bb10e7720e4edcd92b3de2cd76fbcaf28cb0074cc6680657c5859f34d487b24bef0e099f55382e86"
        }
      ],
      "purl": "pkg:npm/esbuild-windows-32@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-windows-32/-/esbuild-windows-32-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-windows-32@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-windows-32/-/esbuild-windows-32-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-windows-64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "626a578dd4f5ab46fc89cb52746c07dccf150a8a8fa4ad7f500af37b75f5f7dc3abbc854c7757c061022d568dbb1f0d84416a7555b5db80861dac8ab226b40bc"
        }
      ],
      "purl": "pkg:npm/esbuild-windows-64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-windows-64/-/esbuild-windows-64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-windows-64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-windows-64/-/esbuild-windows-64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esbuild-windows-arm64",
      "version": "0.14.48",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c768e302b025e9d2bcf9053d9cad391ae8c3d6567a35db534a029b06b3f3885b9402d20802ebd60c1acd5a25cb7dffd152505e00d71344fdc2ef801e6cbd1e2"
        }
      ],
      "purl": "pkg:npm/esbuild-windows-arm64@0.14.48",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esbuild-windows-arm64/-/esbuild-windows-arm64-0.14.48.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esbuild-windows-arm64@0.14.48",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esbuild-windows-arm64/-/esbuild-windows-arm64-0.14.48.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "8.4.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "137f7c4d499f01814f05277381e89e2b6635fb5729771271f325db2bf9b9ee74612929a4d46076b4ee256cb06d9647cf4130ca7dee17aafd404963e96b23c48a"
        }
      ],
      "purl": "pkg:npm/postcss@8.4.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss/-/postcss-8.4.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss@8.4.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss/-/postcss-8.4.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nanoid",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32a064421fce1d34b67a0a2f46d2e4e39c04c8d5f017e728903fb560f7fdbb955f26245d0224700767eba17e42a3d461db4c6ce2c88d3e6f2768da2d483e9107"
        }
      ],
      "purl": "pkg:npm/nanoid@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nanoid@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/nanoid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nanoid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/nanoid"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/nanoid"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/nanoid"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picocolors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5fca0ae84cb947bbaeb38b6e95a130eff324609b415c71e72cb2da3e321b19d03fc3196dac9bc13c0235bb354e5555346de46c5b799e6a06e26bf87c8b6248d"
        }
      ],
      "purl": "pkg:npm/picocolors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picocolors/-/picocolors-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-js",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4745ef549f56bac2e2a930848860a620208ca65702908c30475d663920fd091e6ef885d8762b1e784b970950234b9e33ab090b70f367994e0e789ead52b5a10f"
        }
      ],
      "purl": "pkg:npm/source-map-js@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-js@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.22.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c1a6eb98b98e6316c962fc922cd6895dc3a7ce402062a2886a59983fda189a3b26d739fb789689eff39b8338a5dd7fcae1c8ad79f5cc54e5c0dc2bf34a93ccf"
        }
      ],
      "purl": "pkg:npm/resolve@1.22.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.22.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/resolve"
        },
        {
          "name": "cdx:npm:bin",
          "value": "resolve"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/resolve"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/resolve"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/resolve"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-core-module",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb914fcb93e7c263b796f7cc6f402ca0f6811bee4a1d4234c181573ad60f9d5555b294c552e31935f35a35546ddc565a76cb6ed9cf31db7bf29115bf341a14e8"
        }
      ],
      "purl": "pkg:npm/is-core-module@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.9.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f676f3b4554e8e7a3ed1916246ade8636f33008c5a79fd528fa79b53a56215e091c764ad7f0716c546d7ffb220364964ded3d71a0e656d618cd61086c14b8cf"
        }
      ],
      "purl": "pkg:npm/has@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2dd169d74bd7e076480871e3dee911cd935580f3e9ae3dae9c4a3791dd5f0adbbabd041d6b4c4dd1d69ec7bf4cf567201cf2ce95beff0323259febcd4c02dd3"
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup",
      "version": "2.75.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5521358b2d1e68060d0b11176a579385d157a99278daa0c16ad030adf9cf94434467c7ab43ed0b617e095ce2cf71e59f66957556d6706777450ae399892c85b5"
        }
      ],
      "purl": "pkg:npm/rollup@2.75.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup/-/rollup-2.75.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup@2.75.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup/-/rollup-2.75.7.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/rollup"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rollup"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/rollup"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/rollup"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/rollup"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@vitejs",
      "name": "plugin-react",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6aeac1366328d24cf53b8a91a18f853387a9480dfdcb74a1586baa7cb440ff7cf4a0424076da127e003768ef7cfcf0821c0a8c69db8bc48c44ad6ad52881735c"
        }
      ],
      "purl": "pkg:npm/%40vitejs/plugin-react@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@vitejs/plugin-react@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "core",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7106d6069c5c6dbb3f214ade7483e41e200650b2d5f22c20351305cef6e1117212a787f7ad4517139f93230e8ac145944770f0c88ea0981467980b586967a1c1"
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/core/-/core-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/core@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/core/-/core-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@ampproject",
      "name": "remapping",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a919a38fc9e3f6a98b4d05d799a47571c93751749130fadbb0b2406ac66917eb77ae223bd415de77979b20e630427b7291e66e863b1dc1e11cf41c47e49736eb"
        }
      ],
      "purl": "pkg:npm/%40ampproject/remapping@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ampproject/remapping@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b105c26ac164f94f2559811eeba5b1443384f4f8d5cf8bd2339d5f4eedc7c3e0a54e951241bef5f3bef6bc7de9c92e694a1a7a96f40ced2c602035d75e6397ef"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6792c7ae3400ccd20b766ecf81be13b4a7bf0c93beb662765db2ecc5574d7c3681b54a3d52090be94aa6bb5d46936a6e6f0066ac00157da9701230a9c533033"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cf4891d69a2dfde1fb94bb30e71b3d7088aa967e8d725de70740c45fda5ea1ced4cefa73ebbbae7c0320e781a05eee2b08c44911b0f47715987eb3b8956b853"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c95847d0f653d3be6dd29de5b044554bceb87a9e18f0ab0ed350514110ccf0be0eedecf0837a77f6943c2aa383505f37698015f21600d69d003edaf92bba4b1"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60ae46f4b69d77319b72e70ae1cf21e6d58598c3c1bd167fbb25a6375fd26c1748bea1947561a427904069c720b3a5dbcd52eca9b3c9ac1485c0abf7913f62ef"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "code-frame",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c30a694ae5e3af1fe787edc74016535779526a58843b816f6d63518922952d15be829a3572ab654cdeeef56cec91f0246285c0a03146280cdc8b5daa37fbbd1"
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "highlight",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bbbb2d6ceb988da3decc2b8b8f6f61356d6feb833631ddaaba910a3f57c773b59d380dc380b877eecba24ab65863b85a501ee205e419f4fd6e891177e7d768de"
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3267ad0a4cfd7a3f3a9c9415fac142c68186ad46d4dead369202dc8b092bb7d42a101edc3f7f682846343da9249c43b41aedb44ac90c462f80619ddbd53a4df6"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef67d27a784cc361d931354778203d2829a91086f35a242c8cdf811dc05b4bdbebd66b6dfaf2633dd92c20135498a016f131540cf24ae52514dd0844f4d1170f"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0a25fd7e71e401af848c92f427043343b5fe135e95615466ad7aed2df75f1b977d059db1369b8bcd2d7f9559efdda6395bf87ba0198cd6eee4171fdf073c463"
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "generator",
      "version": "7.18.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b21724fbb54b958ef66b6c3d737cd85ae135a7038a12240757b19351b4a78729797aede2d38b77d2d058f366515ab0dfa378246a4085b5ebc4c67c5b91fd9adc"
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.18.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/generator/-/generator-7.18.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/generator@7.18.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/generator/-/generator-7.18.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "types",
      "version": "7.18.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "406df2c53713201a007109a40acfb000f61986eec393dad729a70835f35b7490cd1114db2d06c71b2546f2afd818c3de089448852634f9f4dce7ec6e87a58f49"
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.18.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/types/-/types-7.18.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.18.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/types/-/types-7.18.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-fast-properties",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fce68a2b4c58aecdc39b1458a8bff20dcf85c455156210e55cc8519afdf3f75e70d87175b67375a26077e788fc55418efe16d1cf20fa637b00eefec64bf71ea2"
        }
      ],
      "purl": "pkg:npm/to-fast-properties@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a1eb9c4a400cc8ea205c173c2fdbc29559298291d4415a83a1f9b610196dfee8e66f6db3774ea306a3986a631427891707f45d95648a090a6e296b704f0cafc"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "398bbb5c4ce39024370b93ecdd0219b107cda6aa09c99640f7dc1df5a59dd39342b42e6958e91284ada690be875d047afc2cb695b35d3e5641a6e4075c4eb780"
        }
      ],
      "purl": "pkg:npm/jsesc@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-2.5.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/jsesc"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/jsesc"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/jsesc"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-compilation-targets",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc58db7e1342cea75e02d65f95416b1b960816a193aac72daed919d43fcd0749835bd4f05b71a69947a9618e06f700844f9ad8e6e833e0e19370b77ad7823342"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-compilation-targets@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "compat-data",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b73ba5ae00d3d100fa53b049e132959364830e0ef094fdfd3fdc80c7545f2f2eef3ffeebb034655957db5b1125b25bb9ebeafb40e841d8d483b1a6d862bba865"
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/compat-data@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-validator-option",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ceee0112b79a2ebff2d125dad58e44a1724c3a4934da07b97d06ba416801c3785e58653fb4d4f0b0991d122479e45ba8bc3b05bf1155914a17e2e23db1f8a43"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-option@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "4.21.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36af0c1424ab9c95d273cf32962c25cd07b7a8d7b7567b488e1b00ad6f4824e10f487371db715a9700295156f30160012e160927bcbc0329d623f5ccf0e75f8d"
        }
      ],
      "purl": "pkg:npm/browserslist@4.21.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-4.21.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.21.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserslist/-/browserslist-4.21.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/browserslist"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserslist"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/browserslist"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/browserslist"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/browserslist"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001361",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9b842ae336d9058e2d7f5ada3a49224a91693a91981542c0eae5023cdd269fb05e855efd8907875ff5e11d1fa83cb1d1a0a935eb14b8c0c6a046818a14ddacd"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001361",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001361.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001361",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001361.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.4.177",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1583e2af735204419ec5265411e86df35a158477cb165ea68542929231cdfe207f4f0108b7f58742ba9519f4cb379810c7024242420905ed3978e5e323ba2682"
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.4.177",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.177.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.4.177",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.4.177.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-releases",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53d87534b44e653abdb84d5235f7e7e96b8f0e0f227268b79ece2b125fe84df2257b888b8d39620b3813b1b68814cabf5e7d3bf3f95f63f04bd06599fa9b0ae1"
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-browserslist-db",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e798ed81106523b0c39efc583dbb4a1ccce7bfa6920364f79bcdc725d720d618b14fd7a3dad7f44ce701282983c6db3b2d35c0ee012b5e8f2c6c3ae28835d18"
        }
      ],
      "purl": "pkg:npm/update-browserslist-db@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/update-browserslist-db@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/browserslist-lint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserslist-lint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/browserslist-lint"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/browserslist-lint"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/browserslist-lint"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escalade",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9347abda05242dff0ed332898808669139c9953bc8346bfbca00cd3db788b17fd3263189647ba1f41d94c5bb1a1249a5128f4c7e1ad2ce68489614652361979f"
        }
      ],
      "purl": "pkg:npm/escalade@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escalade/-/escalade-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f7f5305a4d27d5eb206b6a953cf69e5f29e904da6fcdc270e870e56bb90152d7fbde320773b8f72738cdf833a0b0c56f231ff97111ae6b0680de530bb91c74f"
        }
      ],
      "purl": "pkg:npm/semver@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/@babel/helper-compilation-targets/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/@babel/core/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/@babel/helper-compilation-targets/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/@babel/core/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/@babel/helper-compilation-targets/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/@babel/core/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/@babel/helper-compilation-targets/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/@babel/core/node_modules/.bin/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-transforms",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2fffe98610786a5e6eb9cc339629abbae9070778d17792460a5c11303fd13ab5635df2eaa2f627bd0acafc92b7e966325701863bb383de43325538f1f9654f87"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-environment-visitor",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f27ea049f9f66da398faa969f954b3b28b23095185a962a60c5d1c0963b26e1e760f0dd2132a164752ab84c2404a32f020492402e7d9d31bebf92c4b1d2a72d9"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-environment-visitor@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-environment-visitor/-/helper-environment-visitor-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-environment-visitor@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-environment-visitor/-/helper-environment-visitor-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-module-imports",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0d16fb37564b9261b162d71d9577ab4aaf2c2afb3fdc2de602fd124d16b217ff7d017f96a21986edbc65e894492dcc91fca39139289ded4fe9e4c6eb9915594"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-imports@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-simple-access",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88da4881383202f0d0a438fbe8f3aa83e604b7c7cfc71df268d060dd2df477134a9b64967d8843d131ab2bf12ef701e9516eb755053cf784ec4e0f862db51ad6"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-simple-access@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-simple-access/-/helper-simple-access-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-simple-access@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-simple-access/-/helper-simple-access-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-split-export-declaration",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6dd7b57ad4f1e99c939a86e5f4b2cc310b1a8b315566baae4c41cea8a79011230aa383e539b7fef3e240db966c2296614ff584777f7ebce74b5c0146fe710ba4"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-split-export-declaration@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "template",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2680d6ccf7bec2006c4d381d9c899ade21cd142ed8549a0fb2c5410e38877cd972b7861cba70ed70339499f5437c22b931f76c688a17f4f9228cf8631f79d853"
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/template/-/template-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/template@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/template/-/template-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "parser",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b905526bd8c951efc6ff7d38957b297d65692a92b87ae14b80688c405382a4cfdb81c01d7a81f08bf390cf6dcef462b6a2ccf6e9989745157d695f989753bcb7"
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/parser/-/parser-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/parser/-/parser-7.18.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/parser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "parser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/parser"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/parser"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/parser"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@babel",
      "name": "traverse",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd2fce2b2aa60fb96c94eb45a9bb1c1fa80c2c560e7c6d583ea08a7c05b92ab4dea252aabc1f147a5478f45a6beb2f77918916d88934d264f52ce1a2006be2cf"
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/traverse@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-function-name",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2658cc55d5a0bdedd86309a87953951aefaebcaf9666482d832df1f61199dff5cdff74764a8856b9a512cc1f9b634a5e3bd6d63ae3de995a4fe48cd38d07187"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-function-name@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-function-name@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-hoist-variables",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5252503e416a1542c87325b9b1bce06e4c67d852918305a245ec5cb9a47c44d251cbcf8b2ef7aa3e3c1957f6f0acb6423747941c3ff1f03d2178ad68ceea28e9"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-hoist-variables@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-hoist-variables@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "4.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d15851ee494dde0ed4093ef9cd63b25c91eb758f4b793ae3ac1733cfcec7a40f9d9997ca947c520f122b305ea22f1d61951ce817fbb1bfbc234d85e870c5f91"
        }
      ],
      "purl": "pkg:npm/debug@4.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0690fc7e56332d980e8c5f6ee80381411442c50996784b85ea7863970afebcb53fa36f7be4fd1c9a2963f43d32b25ad98b48cd1bf9a7544c4bdbb353c4687db"
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "11.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58e069fc410652222c252a7bc1cbffcba30efa557d5289dc5aac6e15f9bc781c3358d8327c177a1b3f8878a43d8c29b28681fdf60d793374fe41a5471638b354"
        }
      ],
      "purl": "pkg:npm/globals@11.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@11.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-11.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helpers",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf34a28aa6d03a084f9e0518b7fcd61af2b72c0b0f873e79bdcf5734dd31025da057889e4a1236390962e5dbb15870feef63d93d328071f7190c4d42c1ce73b1"
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helpers@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8e41d8cfe3dcd5888ffa8bb9c826903cac0978b15fc974f7d4f6766cdd5a8ec062208b3202bee376aeee9f31dfb89652f4b5aaf5f146095df67f4d6b668548c"
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.8.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de137b35ab2462f3032d0639e609d6dcd43e99eb0401ea53aa583e5446e3ef3cea10c055361cdc19861ea85a3f4e5633e9e42215ca751dcb0264efa71a04bcce"
        }
      ],
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gensync@1.0.0-beta.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d61a8b14c4ab187447c5abfdabd80d8c9e445f39c8c4654ed3dc5046bc2995c4bcaacdbca59f2cf21ba96409aa0f065499567641bda39f23ce59c0c7f26f1d94"
        }
      ],
      "purl": "pkg:npm/json5@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/json5"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/json5"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/json5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "333ef130fc68cbd90f4bf252723e9f26cd374d9fdf6757493e53234408136b1692d1f50193c155fc0dab4607cfb15099a802cdc0c7b10fed1469fe7395c28fa7"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx/-/plugin-transform-react-jsx-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx/-/plugin-transform-react-jsx-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-annotate-as-pure",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76e391a54898ac4a73288a29ea235b8e7c0a2c02a7278edcb13c91002c849968f441d52b9b96aa34918749211049402f356d288d7d1d3a62bd75976ebe47de5c"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-annotate-as-pure@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "helper-plugin-utils",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82f6679b5600031875dde25d91bf44587067177780b9bdd74cb09911e8474f6916c6229544beb8f9a7b963a22f9ded2654798c60a4fec568193be81086e2d406"
        }
      ],
      "purl": "pkg:npm/%40babel/helper-plugin-utils@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-plugin-utils@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-jsx",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea69a58ed01e7451935aeda9ffc5883911b0cbeeb53cb80e30f39d6b373b62827d642594c85cb703a0a93e444a2ca0f54e801eb315fc28611588088ba3d37eed"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-jsx@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-syntax-jsx/-/plugin-syntax-jsx-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx-development",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "480e87123c1814a17b5838d670c70c1948a69b0fe784d4435b1afe29a2d20ab903fcb30306f591987018804d470de17c294b88f0e02ef914fa10eb4ac525b6a8"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-development@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-development/-/plugin-transform-react-jsx-development-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx-development@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-development/-/plugin-transform-react-jsx-development-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx-self",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0342d01b1e3ee09bfbbbfb56ce8245eda959c2704341de9c18b87d3fe4ed93876988bf89e69ecd48dbfff6d944145243ab7923c4e6af5a66e6eadd0693e03722"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-self@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-self/-/plugin-transform-react-jsx-self-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx-self@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-self/-/plugin-transform-react-jsx-self-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-transform-react-jsx-source",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bad6669404a77837dd68c8749bf59abac6e352311d1ab409cf4bc52bddddef00f7c5fe7006d5f6d7dfaae889423597a0b887314b67ff0af2d9ae52d2bd21d05f"
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx-source@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-source/-/plugin-transform-react-jsx-source-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx-source@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/plugin-transform-react-jsx-source/-/plugin-transform-react-jsx-source-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "pluginutils",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88a9c55ebecd91d640207888584f815f950b8bfb9c5456160fa4db015fab65cb624536363cbeadb082a1a0839aa2c922580920bbe56c6d781454334b1dff889d"
        }
      ],
      "purl": "pkg:npm/%40rollup/pluginutils@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/pluginutils@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/pluginutils/-/pluginutils-4.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estree-walker",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45f924fcca7f0cbec95637b7bb5f05c45ba34254cd476aba41f312301ec0bc2071f753468ff6dade409fcdad1fe9d5436f0ed89517ff9c3ae7ee942b082c90ff"
        }
      ],
      "purl": "pkg:npm/estree-walker@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estree-walker@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estree-walker/-/estree-walker-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "254ded7874cd8e6136542185cee63c117cc20d5c04a81d9af1fb08bf0692b4784058911e55dd68d500fcd0253af997445d748b6d2b2e2f0263902056a9141454"
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-refresh",
      "version": "0.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cff00f414f40a94410fe3582cb78886577f46a1bdfa092d5235b516413e566ece0a29db1b54ac85c2b9b5bf65b38933be366bf6639073b1d88019e01323c05e"
        }
      ],
      "purl": "pkg:npm/react-refresh@0.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-refresh/-/react-refresh-0.13.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-refresh@0.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-refresh/-/react-refresh-0.13.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "abort-controller",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87c950f2d69c6589d1def3504e089b8feb4e0c7239ffe974e80bb63dcae2bff1a67add1e6a3e13c161f8d6c3bdc271c3890b048f5f6ad1daf375675e007b707a"
        }
      ],
      "purl": "pkg:npm/abort-controller@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abort-controller@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-target-shim",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bfd976e74b3feec51094ebe35d54980a5834cce36efe32a61b910cc3df6d43b8240952a3ae24a200d08336f96db1b581dd28e999e1d47a7c4c6c7784972fe59"
        }
      ],
      "purl": "pkg:npm/event-target-shim@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-target-shim@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-target-shim/-/event-target-shim-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.20.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0df27eaba10f7062990f54165234a9aa9f90edb0d04ec408178cdf500b59eaa93e1ffdff411860f42129dfdb2cfbf4f6bf0d3e1da89d0b479c263fc344b21a2a"
        }
      ],
      "purl": "pkg:npm/body-parser@1.20.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcd7fb4f2cd3c7a4b7c9124e6ce015efde7aafc72bdbe3a3f000b976df3048fdc1400a1e5f9f0da07c8253c3fccc690d5d2b634d28ba7f33ba174a4175c61b12"
        }
      ],
      "purl": "pkg:npm/bytes@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83b9c7e8fe9dc838a8268800006a6b1a90ad5489898693e4feba02cdd6f77c887ad7fb3f9cfb1f47aa27c8cc2408047f3a50b7c810b49444af52840402cb08af"
        }
      ],
      "purl": "pkg:npm/depd@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dac246253697208691d70e22252368374867318ec6a5cfe7f03e2a482270f10a855977fb72e0209c41f1069c1e69570f7af0b69772a98d80b1dcdca941081a26"
        }
      ],
      "purl": "pkg:npm/destroy@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16dc2b1bf7ae0736848d8791a8e825cbb1b4aaf8a25e82569ef107d99d6994175781bca3bf7e291d349bf73a1e1ccc83cb7dfe0d6cb95adf56a3e4d446d39849"
        }
      ],
      "purl": "pkg:npm/http-errors@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1392c35fb5aba7ce4a8a5e5b859bf8ea3f2339e6e82aae4932660cde05467461fcc45a4f59750cb0dae53830ab928c4c11e362fd7648c2e46f6385cdc18309a7"
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "470340f59ffb3eb2b4eab60b23314c95a17e97bde2c29ceca9120581b30b6d370b0fa70e6a8f364da59e7cf5d0bc1d9f382e008ee612127752ecdfe64c26e475"
        }
      ],
      "purl": "pkg:npm/statuses@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toidentifier",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39b123ca12483f0c840d987e37574fee7ab2eba7355e764521f2d18dbda797a5fa6ec2329e9e54a8c7fd8efc14e5654b447be246eece58844cfad3c3e500744"
        }
      ],
      "purl": "pkg:npm/toidentifier@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toidentifier@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15973920dc4340842936cddbfb209c1dfd0503e33d91c51c2991c198f29b0255c09864dab8c189d55802c733e6ebb6e26378f5a2605fc2966b83afc0a1e7e92"
        }
      ],
      "purl": "pkg:npm/on-finished@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58cc26f4b851528f9651a44dfaf46e113a86f3d22066985548d91d16079beac4bf1383ab0c837bb78f0201ec121d773a0bc95e7c3f0a29faf9bd8eb56eb425a3"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2beccd84d0e1517c87c966328689e23c94129bedf4421f816fe4a34f12cee027c8da76fa2d76c4b4f0fcce291ee8a57859fd7923b6ddd617d837f1dae6c91a9"
        }
      ],
      "purl": "pkg:npm/qs@6.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.10.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "side-channel",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab95cfcada85108287906762308ad8d749af2d1be7421e36ffe1a8065156ddbd8b5cb136c71269645766f78c1ed016a85774702721aa839c12edea714efd19bf"
        }
      ],
      "purl": "pkg:npm/side-channel@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "call-bind",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecef856c28a1ac1e5619b1587ac72dc264ca69eeab3a22339b3d6272b79627ed1a03b2c97eeaa112ca364fd9dca5c16dccc42dcd77f64061ae7962464d8b2aac"
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-intrinsic",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25f9b73b20b11e1f43272736f2a1a4f8999f9293b8d40e179277834ae8cdf4c0d7ae6e280ca747be776167674df78f8444d7e46095837255ba9362ff6461e35c"
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-symbols",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9772c2b85e8c8033704c32a47581848a1623b79a513db120e3aaed9669d23e551b82607c2ce22b2896d86050526e73da25ec4c2ad88f3bc8667918d1cf64ddf8"
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-inspect",
      "version": "1.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfe70fc56d10194a7499ca9cb204322d5443a171506d73b005aab217b548808e1358d42c0c7ac1a5442c9519887c0a1859d633b3a525289b41d972694da352a5"
        }
      ],
      "purl": "pkg:npm/object-inspect@1.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaa241b44c95812d1998f19d0853d627716b7a8aaf1b83154259ff902805ece96af7921b3a9d3f056c8cc1b76d9f8553be433c63b921090d97824fed72b0978a"
        }
      ],
      "purl": "pkg:npm/raw-body@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cb66d8852b2e7f05a52b03dcfa5ddc37bfb0b8994aeaecf461d2443a54036e5ea3a3f6253e2e266fc6a0524542f0117b57c36ecdec8f36a464b00de1ced29"
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e444aafdb144f1107f0c75fb8248fed58b3272cd134c8e3d89d9da3626bdcaca6e7df0955d124b2eccf4029e514f5b8932f50fa203e99af411a6d3a5d0072f2"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76afaa7a543d6a41e970e97f8145514f15483a4009d70477400bdbe11b158d2f285681630c64dcebbf702589949a49d41791f030b3a06f93be6b72b17d66a93d"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.52.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.52.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8da4880f33fda59552e197d0f93cefb625a17691611364431f3f10264a57f522292eaf3c56e785e63270eadfba09441c02803ab7ec7cf4c2eb580aa97c313c89"
        }
      ],
      "purl": "pkg:npm/compression@1.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.7.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d802d8536b69b654ac6ebd20f70cf0bf1b2f94fac380d4b02e4fc9a4991bafc3e34009269e5c443e34771517bace365eaa71ac55dd4b9e9b06b093eefe4892f"
        }
      ],
      "purl": "pkg:npm/accepts@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8452ca863cbb0cfa3ff37428598ec9d7e758385eb1c53885f07e70953c695093f9398226a470ab2ec4239b051bba0d29bda29c3f3bab2559b25d82140ce1b06"
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4c84e7c50cf8aff6de638c85e41e8b169a44b241bbec80454d933d044476ee2e1d93ffb8f832aaa9cf9db715ef0c558f3d282e9287f41f4b6b0cf928e014373"
        }
      ],
      "purl": "pkg:npm/bytes@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "005debecfe5d5b12fc331c884d132539140d68e036224005693af893b054ba68cfb51a460d36699743dbd5708ee89783081769d76e8282cf6c331a928e063246"
        }
      ],
      "purl": "pkg:npm/compressible@2.0.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a59004f8524ba32213cad76a2b4539b3e148a6337424fdcecc58bfbbc471f84579fd6f894d61971bcc45cdebc4ec08c17c3a87bfff2f2fca90b088479ea464ac"
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04d19b58b7ddd1e50f69b8645d4566d23f2ebaf444c93879a2f45afddca8c3f06a01b649c82fb97d4f88cd03b39802b362a6110084a8461750af778867f3d7aa"
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66a45773eb59ba44e848d9a1e42da258c4a85775f561470f6ea10ce039041b9b4d417ad051908d5461afdc8ba272790cb4f7c67f75eda7c5825ecdbde62435a5"
        }
      ],
      "purl": "pkg:npm/connect@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-3.7.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-3.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68059c5b9eeec5536b419a855e3213a56dec2144261c61b7a926fd9946a1f4c80c0b835e5a134e94d8d7118ab71e3440bcbe9aad4be2646189b0183acf4cec58"
        }
      ],
      "purl": "pkg:npm/finalhandler@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cf257abc26a15a5589b609698fbe73f6232a3865233bfd029c4a6b8c2c339b7e91f97e2ed150699dfeb4c37feaeeb7fb1a88389011e5533600262447403b1d3"
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3624aea59e0e7ae1b0afaf251887b29bf92c219309a1d506392099fc54a74f172b7a46efaab81d53194938ca628da299563009ad6ac6b3fe89cbc38cbb28fda3"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a4a9d906000c9ffd7fe03e15c6bdf800cad0d9b436ebf9b90d509d0df61e4c23f7667600acde5ea1a07adc52fe35b1129ec378c8c2ba78a900d788af7d52dc3"
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2c9e3b1153fc96723799b4cfd3df5f0e1208127a4b2833d43a65d30aa39610c418604fd469ec51510bd29eb78681b57dc8f77c7ca75e2f4d60ee2758e2fea9"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a9677ccffa34f53c8ec8f277a6257e002a6017d3bd199183d5595fc068a4c997eb570931b255d0b56b848bf11510604c24fdfdf8657f144f290debc170aea00"
        }
      ],
      "purl": "pkg:npm/statuses@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4c653bc8913d5df93146bc33aaa1d39c971d105a49208ba4dda1af200bc7df18002acfda733d36560326dbb071e8103ff3b4cb64bff5686136324a1527f3584"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-module-lexer",
      "version": "0.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fbb23063f92218069c41f63e60184a32f126c80267c3982b4d48231bce4f7bbbdc508ffa6fba598d91bc9d0efee3c621cc4004aab1200f6742cff2482be018bf"
        }
      ],
      "purl": "pkg:npm/es-module-lexer@0.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-module-lexer@0.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-0.10.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-glob",
      "version": "3.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6b3b7fb56f14a8dd9547027ab3cae7b0613e9a3051d101de0a72cf76300a278f04192ec2bd774485d48c90de4e4fa22af14d6d0e7bf46a160310e9370d13913"
        }
      ],
      "purl": "pkg:npm/fast-glob@3.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.2.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.stat",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46484f3e9db3aea0c0400ff68cd867ced70f025bfae17761229edaef8e78039a2f23b06e93182decc5fbb9dc00bb7ce0d437293d4d2bcf7555d5279aaaf638f8"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.walk",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0607e53196059c810920c28f067041b07a6a1316ddc520ef5a6da6c199a1b05c8a01299f864f2d293f5f396de1a0ecb96287f3521d25765c0b35967ce7a1c4a"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.scandir",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "beadb806adf29b91c4426d8d282af7c970f08dceef4ec1138510e7929d832bda75baa2d1f831eeae6fcd393a34286ec760753b7a9a4a663dcccaa62e3017fada"
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-parallel",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e65e15c9947ce8b67f943c594d1ea3a8bf00144d92d0814b30fdba01b8ec2d5003c4776107f734194b07fb2dfd51f0a2dddcf3f0e950b8f9a768938ca031d004"
        }
      ],
      "purl": "pkg:npm/run-parallel@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-parallel@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "queue-microtask",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36e68d49ae9f94a4f925a498433268934e09cd32f5080e9a1a1bf9adf2d6dcf82a03e3360a1a59427002f21f22e19164052f17e51aa40c11c0eebe217a3dcaf4"
        }
      ],
      "purl": "pkg:npm/queue-microtask@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/queue-microtask@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastq",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6299295272bca1dd28d6199e49ced452cfde07fbc83d62588ca724d90288cc07fbd559b500043711bb99077836248cbea60f84443d2fa88efd2b26620767b637"
        }
      ],
      "purl": "pkg:npm/fastq@1.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fastq/-/fastq-1.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastq@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fastq/-/fastq-1.13.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reusify",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53d9c7f3c6b77dcfde902175974fd43f5228b22b888f24e1ee106f5d530762055c7c6bedf3ded782e8f650e2c3788e411b69bbfeec3268b553e9f6ed0b04f2cf"
        }
      ],
      "purl": "pkg:npm/reusify@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reusify/-/reusify-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reusify@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reusify/-/reusify-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00e22049009ea62258c0fdc04671b1fb95674eed870587736c63f8e5e2f0d6faf7cc1def64b7b279dd6c0bd8676dc39cf7f4ab33233944f42b906cf8692f59a3"
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a"
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "49b29b00d90deb4dd58b88c466fe3d2de549327e321b0b1bcd9c28ac4a32122badb0dde725875b3b7eb37e1189e90103a4e6481640ed9eae494719af9778eca1"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge2",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a"
        }
      ],
      "purl": "pkg:npm/merge2@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge2@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "4.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cccbe1117045b6abc6763e8f96357bb0ddce586944858c03b91ac26a7c497b523bed22e14a3ba66b2af708b5dcbdf1dc05236375b60df334874a6904fe68d74"
        }
      ],
      "purl": "pkg:npm/micromatch@4.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@4.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fcba6f8bd51cccdd60d2cef866ea0233d727d36c1b7a61395c10a02fb26a82659170e3acfadba9558fd8f5c843d6df71f91fe94142964c3f593c97eefc1dad0"
        }
      ],
      "purl": "pkg:npm/braces@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8ea3d17e74c5260b62dc6f805b56f9ca2714cf8c29be451a5ee200ee1abce42fb984565fdd8d84aed8e750d8f6b7d36378a2a91283d8abea368b589d94495a5"
        }
      ],
      "purl": "pkg:npm/fill-range@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb93fb8b3e97e7212bd5cc1c82f4316db230ed493780ecb974876d678ac3bde2ea86b7493fe2e2fc7c7ab722b43446fed860b29de08c2621aaac00c248d93cb1"
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e350a27e483a7bc4f2952a5db53a5e2d532abd20445734edb47bc4443ef8d7ea6767c00dbf4d34e0c44be3740a3c394af5c1af369e8d6566540656c65d8c719e"
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graphql",
      "version": "16.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9b1e087c231fa3fea63e6bf65c267150fa3f1ecda92a3e21f03e266157fdcf8069607fde90301079fdfdab9220bdb202e8cbfc6f4fa4d289a7f69d31c987988"
        }
      ],
      "purl": "pkg:npm/graphql@16.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graphql/-/graphql-16.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphql@16.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graphql/-/graphql-16.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graphql-tag",
      "version": "2.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15d48d72ed9041c5a733654dbd20820c2552e4fa4faa9ce0153f3e197cea26ea037740819dcc42636efcbb89a144eeed320a36263809039699fa759243f67ec6"
        }
      ],
      "purl": "pkg:npm/graphql-tag@2.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graphql-tag/-/graphql-tag-2.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphql-tag@2.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graphql-tag/-/graphql-tag-2.12.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77ac4ea440dfb22d8265594f43319ebb1f173302d3f61b2c02c68f604c5a40cb98b24c1bfb1d71ec9dfbd6d5a56c17561eba32f7d2a7541eaa22451bb395f751"
        }
      ],
      "purl": "pkg:npm/tslib@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-2.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "history",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66a68ac238eb0185187cb1be86d19a2086789e2a17d8bef4654308172b12df1bc1b121b8c7f9f557a4d757737c65836e1469438ab160df64fb07a58e50f0d871"
        }
      ],
      "purl": "pkg:npm/history@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/history/-/history-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/history@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/history/-/history-5.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "runtime",
      "version": "7.18.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7dc22eff016e97b4a6a101edb4630d3f98c9632aad01d6bd9f3ddbda01d57f28f0d97b015775a69ae8aee5c6664167c1413690a2013ea21cf99de903bd6ca7d"
        }
      ],
      "purl": "pkg:npm/%40babel/runtime@7.18.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.18.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/runtime@7.18.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.18.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.13.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a77553f9c38483116c45103d5f896423513e936fc2b672ad53881cc7268252b7a294bfefa88e82759df0c55531dd439483e82750e41071123b066488eb9e8c60"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.13.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.13.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.13.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kolorist",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "971a423371d3beab86c4a1b31de92707fb148ee56850494b95f6275d94fbdcaf20791f6341bae81a54821416b1f7fd26a46a03de4cdc30b9ce94640f249372a9"
        }
      ],
      "purl": "pkg:npm/kolorist@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kolorist/-/kolorist-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kolorist@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kolorist/-/kolorist-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "magic-string",
      "version": "0.26.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "373ce55e9725b79cc06e6a3a87a8cd73cce5da0351187be6b195b822f6614c2e16ee4e0e94b3fe4b960bbacb1afebde2c4d4fae8a3907cd3919571d23b2fd7e0"
        }
      ],
      "purl": "pkg:npm/magic-string@0.26.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/magic-string/-/magic-string-0.26.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/magic-string@0.26.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/magic-string/-/magic-string-0.26.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sourcemap-codec",
      "version": "1.4.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4dca4a23579522878960a394a8e5db70f9fd098095f7d0a08d23c830873d89f40d79c03d0c97ab631cac1fe9f4d26ba7c075505d65e34eb3d789ef5a8293cbc"
        }
      ],
      "purl": "pkg:npm/sourcemap-codec@1.4.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sourcemap-codec@1.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sourcemap-codec/-/sourcemap-codec-1.4.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "2.6.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66330f1447d5c798fecb6c85df92b3c79b05ee40f3c6e0e3eb3887e0515b3a9f3bcca0d9371f321312486f4e4e185e0d96df481c520c064465e3555dbdc35d6d"
        }
      ],
      "purl": "pkg:npm/node-fetch@2.6.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.6.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1a139ee7ba9c64eafdc7637e7e8f307061ad2b292cb45d1f094b164fc202ebef2b34201ce11af880d7f4d41892e6495aacf296fd027bc809712e3872e9ad84f"
        }
      ],
      "purl": "pkg:npm/whatwg-url@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tr46",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37758cb2ea95eba953df40ab5cd6c48f1e06130968c37bfaaebe2609cbfaa6b9dfc214b4d6b920c857633cd05877d6ebecba57575f849a1d357c79ead86760af"
        }
      ],
      "purl": "pkg:npm/tr46@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d89027df3f0047aae32bc4a6f28ad10b487f6dc97f0ea2fbb513dd199e08d428dd17e11a30b998c411f25ee28bf38f5eb9c3c586f068c4cb1f95f39bf24c5a79"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24bca1ef14f5922cda12f71a5ce43039cdbf621c3a2993af3dfd52f38d355322e4f3a094efd2cddef97bced5c69bfa59f988e8c80278af1987c1b9015c95fecb"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-6.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-error-boundary",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8cf6e3f36494c5eb0450391992aef38882de2527d302d6c36010e8f65c6b034d1138926a56c60ec434af4458d28944c00e63dcf432e178c887e5ea0a78b28b4"
        }
      ],
      "purl": "pkg:npm/react-error-boundary@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-error-boundary/-/react-error-boundary-3.1.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-error-boundary@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-error-boundary/-/react-error-boundary-3.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-helmet-async",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f63679eff7409fdb77aba8677904b4c2e92a0b610d38180c3551216ff646f594b151eb73548c38880984537f0869583740661ab903e149e513b8852d160956a6"
        }
      ],
      "purl": "pkg:npm/react-helmet-async@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-helmet-async/-/react-helmet-async-1.3.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-helmet-async@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-helmet-async/-/react-helmet-async-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "invariant",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6125f41506e689339ada3a926349f9220fa0696c213836cfff2da5e5eb0198b54058f379d64ba45ff6d5e6d9ef1568aeb42448d895d6cf89ffc0d81d42da034"
        }
      ],
      "purl": "pkg:npm/invariant@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invariant/-/invariant-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invariant@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invariant/-/invariant-2.2.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prop-types",
      "version": "15.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a23f3b0a064809dba5528868815011ec08e50b4df6ed4e1e9782fa780bcea827ae74c0d553435384d695f9bf437f87578123f58173139cf7617deff6a831f972"
        }
      ],
      "purl": "pkg:npm/prop-types@15.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prop-types@15.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prop-types/-/prop-types-15.8.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-is",
      "version": "16.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db87baca71361fe38ab7892ab0ebcd77c901a55eb9ce8c5b038055b04381dc0455590922fc31f3694a02e4ab8e37f06271c0da0824d906e39c7d9b3bd2447c6d"
        }
      ],
      "purl": "pkg:npm/react-is@16.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-is@16.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-fast-compare",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aed18898f6746322ebb1c288f714e957ca6c77a23c540b63282cd00e5cf20efa8903c5ce5bbf135d843035135df20f096670eef2af45bbfd6fe073c057055d1c"
        }
      ],
      "purl": "pkg:npm/react-fast-compare@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-fast-compare/-/react-fast-compare-3.2.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-fast-compare@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-fast-compare/-/react-fast-compare-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "shallowequal",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb49b52685194a53c08d756d3cf5bbd1a6567c82ff7523fb0059119e788b0ab2bff0c0caa20dd3c924c199c903f9139b5711f4bf84e8c7aefe175e0f7440f6a1"
        }
      ],
      "purl": "pkg:npm/shallowequal@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shallowequal/-/shallowequal-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shallowequal@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shallowequal/-/shallowequal-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c6b910cd8d75228ec50bd2f97a9d20fb730511bb31208256ce685b9933d8379300d7396553724d232f38cfcc60fe4dacd66dba1962ee76ffdfd73dd5209def6"
        }
      ],
      "purl": "pkg:npm/serve-static@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaa5b3b8e8d214ebaa3e315ee0d3ac30b69f4e8410c0148e1294be17012ddc0d95def2ae6d3aae4f7be62d3429160317a7c02515616e3f5a8a68964eb4fa555e"
        }
      ],
      "purl": "pkg:npm/send@0.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6882f9171ee66b055adf4d1a976067104e2236fa35a844f12eb3c8fe8d392fbcfa828edf0b0d49e844266cae05989d804bb920545fca1195ae7c17dd0a531c3e"
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc9da6418335f2b1053ae75e57819285318843b45bcc0ee8cdb53d23f5c1a66ee4aa0332c209b294cc171f16499a45686249daf5dda95575573dd6133fd7a3f1"
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/send/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/send/node_modules/.bin/mime"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/send/node_modules/.bin/mime"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/send/node_modules/.bin/mime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eb82cc7ea2baa8ca09e68456ca68713a736f7a27e1d30105e8c4417a80dba944e9a6189468cb37c6ddc700bdea8206bc2bff6cb143905577f1939796a03b04a"
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "set-cookie-parser",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "707300b525e295fc8178f76e6440553d309fb53416cfa7a15890f960d520e26aaf468b2bae329ba38592f09901d3f471a27328a211e6edc3861fad260e4450f7"
        }
      ],
      "purl": "pkg:npm/set-cookie-parser@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-cookie-parser@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "undici",
      "version": "5.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99cfbc498d5f5ee6d3addc780970e478514657c948dd3ab823fef453557c67a8388ac706208d2e2ceec23e70ede7a6d711bbda2b0a364f6f95aed7966d989789"
        }
      ],
      "purl": "pkg:npm/undici@5.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/undici/-/undici-5.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/undici/-/undici-5.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "8.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8d62cd9078c5b2f865853849bdc679fa1c20e9d25ed0043ee697cccb52627ef77439345d0da1c12b9f09139175453625f7fdfa42e9a7d2f0385bfe0cfb47b7a"
        }
      ],
      "purl": "pkg:npm/uuid@8.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@8.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uuid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/uuid"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/uuid"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/uuid"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vite-plugin-inspect",
      "version": "0.3.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a50278742f5e23b50037abafba71b854dfe65c384e6239e36ec90a9400afd3dc82acbf53f00f0a475125a3a4fdb9b813b45936f0db3b18d11dc7a5bb5fc3e00"
        }
      ],
      "purl": "pkg:npm/vite-plugin-inspect@0.3.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vite-plugin-inspect/-/vite-plugin-inspect-0.3.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vite-plugin-inspect@0.3.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vite-plugin-inspect/-/vite-plugin-inspect-0.3.15.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sirv",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e10a20e9a136f6722300e29eff0a30153c4e7666c464a6fededb0b963681473270b6ab68d010a10f6cf31f42e1802497888f95ed7f98e39bf5e300594354cadf"
        }
      ],
      "purl": "pkg:npm/sirv@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sirv/-/sirv-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sirv@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sirv/-/sirv-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@polka",
      "name": "url",
      "version": "1.0.0-next.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b949a6f50b8fe27294d957365ce46869cfcf3242d18ec8da985dc6603acb01daeb80afec05fccbcde9b82d5b7daaec71ebbc1922f81b19d0eb8dbfa115dcaf6"
        }
      ],
      "purl": "pkg:npm/%40polka/url@1.0.0-next.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@polka/url@1.0.0-next.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@polka/url/-/url-1.0.0-next.21.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mrmime",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "873cc46a00200f2a14d50eb2839b88f80a2b42076f302babdc570a7fb36130a5ac69883e4676d3c8745affd2252c5f6b7f8e7930e0ad72aaab410f37a4f3fb53"
        }
      ],
      "purl": "pkg:npm/mrmime@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mrmime/-/mrmime-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mrmime@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mrmime/-/mrmime-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "totalist",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78cfa9081c573bf9e3b45eef745b07baa6fe1256f1aad238af9100be4ea0adf005c89e88bd695291f6794fda330bac56c37163d5f1a84a6ae5d2052ce3a25523"
        }
      ],
      "purl": "pkg:npm/totalist@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/totalist/-/totalist-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/totalist@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/totalist/-/totalist-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ufo",
      "version": "0.7.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "213dead253efb64a90f2da0740dfc190e8b8548aa8aa17aa33516790d593f72d06f01df1261c27a0a06ee4e1f1f331c33afbde4337cab85a302745520118880e"
        }
      ],
      "purl": "pkg:npm/ufo@0.7.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ufo/-/ufo-0.7.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ufo@0.7.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ufo/-/ufo-0.7.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "web-streams-polyfill",
      "version": "3.2.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b430edf075758aacb6cbd038069d457b58756ec3d394bcbe218e09cf908784bc44a4ef88002138b91bad3a26d64fa77f5c77c1c0f55433088bc0e3d2e93cde5"
        }
      ],
      "purl": "pkg:npm/web-streams-polyfill@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/web-streams-polyfill/-/web-streams-polyfill-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/web-streams-polyfill@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/web-streams-polyfill/-/web-streams-polyfill-3.2.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "web-streams-polyfill/ponyfill,ReadableStream,web-streams-polyfill/ponyfill/ReadableStream"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "edge-entry.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "worktop",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5811cfd6193ca4b3fb6a1030d777ee80359c3b449400e8820fa0c74ff6df2d6a02200fcf2fdbbb18a76e753da7199f04191d403db182008e99cca1b5f97f8f9d"
        }
      ],
      "purl": "pkg:npm/worktop@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/worktop/-/worktop-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/worktop@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/worktop/-/worktop-0.7.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexparam",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8092b07763153d61c02052ec6980d97f22b31cd4b8a3b13fbfc62635fe38be6795d9ee187d5a034e84ce293bc4eda6faf1c449fbe90bb845c905a11e255b79a3"
        }
      ],
      "purl": "pkg:npm/regexparam@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexparam/-/regexparam-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexparam@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexparam/-/regexparam-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "cli",
      "version": "3.0.25",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5108fb5c3484d0056fd6f730cb6733570b1c4aea74fa79ccf2c63b4fd21eb22fa24a3818d1fdba88cb2558117bc535aea7528b0ddf1692cb5c3f482caf32ecc4"
        }
      ],
      "purl": "pkg:npm/%40shopify/cli@3.0.25",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/cli/-/cli-3.0.25.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/cli@3.0.25",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/cli/-/cli-3.0.25.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/shopify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shopify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/shopify"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/shopify"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/shopify"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bugsnag",
      "name": "js",
      "version": "7.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c01881ff8c2fdd7e88c361eb53bc32c069d3fadb750df3898d379921c595cc9e2ef5be5abf1e129af26881f1e361157f04865a1ae1b9c31654ff436c432e36f6"
        }
      ],
      "purl": "pkg:npm/%40bugsnag/js@7.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bugsnag/js/-/js-7.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bugsnag/js@7.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bugsnag/js/-/js-7.17.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bugsnag",
      "name": "browser",
      "version": "7.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85317505beb69080cde7beaf570faeda6d64c93e1bff59439403b18b94be4f59e9c9d77e0ca3d04e85cd6d126bdbdcf6dcd8be186dbab9603573eaf359d6110d"
        }
      ],
      "purl": "pkg:npm/%40bugsnag/browser@7.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bugsnag/browser/-/browser-7.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bugsnag/browser@7.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bugsnag/browser/-/browser-7.17.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bugsnag",
      "name": "core",
      "version": "7.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aaddfe51beb8b6ca5b75beb032225920e172286bfb6521916bae868c1996dd8f5c4dbe3663c70dc75ff48716387038526f07ee9c64ea282723151ad171395f34"
        }
      ],
      "purl": "pkg:npm/%40bugsnag/core@7.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bugsnag/core/-/core-7.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bugsnag/core@7.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bugsnag/core/-/core-7.17.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bugsnag",
      "name": "cuid",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ceb7c69a048f8abce4069de06da6e0b3dd8ab3c8401e85dd5fde70b9cabf532185b5f88cd829adb1592e0488ccf9a4f3a744f1e4cb24b9b7fc264a6379d468e"
        }
      ],
      "purl": "pkg:npm/%40bugsnag/cuid@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bugsnag/cuid/-/cuid-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bugsnag/cuid@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bugsnag/cuid/-/cuid-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bugsnag",
      "name": "safe-json-stringify",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86dcc53b565ce7b4bc9207512bd98b70f5535b5058da28df1fb0e4d827999aca5358a74aa92a358b09aaaead96b518c5968f1a4596202d7d3016b0d717ff432c"
        }
      ],
      "purl": "pkg:npm/%40bugsnag/safe-json-stringify@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bugsnag/safe-json-stringify/-/safe-json-stringify-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bugsnag/safe-json-stringify@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bugsnag/safe-json-stringify/-/safe-json-stringify-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-stack-parser",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a4e55eb055accf86ae4c8693be014c499f9c7b5d25c697547ddd59fb8becd2d792835714228de8cd0abcfcdf8d3fd9b80b06347d1ad106f1954a38d0e372a19"
        }
      ],
      "purl": "pkg:npm/error-stack-parser@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-stack-parser@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "stackframe",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1e56db7b796412f8d6ba17ffd2e242762b655b4654bd0f8de6025332569556a2fcbda3e8df807f0ef5a83300dcda88b8dc940d2863351710ce0fbab85250287"
        }
      ],
      "purl": "pkg:npm/stackframe@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stackframe@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stackframe/-/stackframe-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iserror",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0a186ac555a5b01138a63f74a25b08c3798dbba2f668c993c7b716e50b8842abd7d7c5e77f8dab31f804d61458c25524599e0f154ccb0dd670e71a8eb33014b"
        }
      ],
      "purl": "pkg:npm/iserror@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iserror/-/iserror-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iserror@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iserror/-/iserror-0.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stack-generator",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b09ee6bf864a8cea917893c4a7999db37c44ec454a565d111f03f8284fc48b095e223856b86f3397da70e2a5601914f4e32ef401f367f9c9aa1d31584ad3225"
        }
      ],
      "purl": "pkg:npm/stack-generator@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stack-generator/-/stack-generator-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stack-generator@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stack-generator/-/stack-generator-2.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bugsnag",
      "name": "node",
      "version": "7.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5393b40ca7478a4e0f29d16e34e319d61ec01bcfe70eef0c81530af0d8501c2d88f84086ccab3d25d218e9c0dfaa525d3b45b0ab81d280fd158dd44bdfe738b"
        }
      ],
      "purl": "pkg:npm/%40bugsnag/node@7.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bugsnag/node/-/node-7.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bugsnag/node@7.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bugsnag/node/-/node-7.17.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "byline",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3ac1e6c0cbe478491f1756e256b76576ac6be19eb87137ef52d7918db932b7c0a3ce5c517a44d73ef2e8365e11fedace1ffaeb9d1b891455899839058bda0d1"
        }
      ],
      "purl": "pkg:npm/byline@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/byline/-/byline-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/byline@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/byline/-/byline-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pump",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f0672fa9dd216cd4fcad77f8d872de30a6fe3d1e2602a9df5195ce5955d93457ef18cefea34790659374d198f2f57edebd4f13f420c64627e58f154d81161c3"
        }
      ],
      "purl": "pkg:npm/pump@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oclif",
      "name": "core",
      "version": "1.9.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0bad390abe118474cc5d80292f1755b7f3cbe88039720b8de8c3efb0c8f192f069a64d85bdcb23d3976d45d0ea4a1b244696731edbbae5e986d6d1f2f1358f59"
        }
      ],
      "purl": "pkg:npm/%40oclif/core@1.9.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oclif/core/-/core-1.9.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oclif/core@1.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oclif/core/-/core-1.9.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oclif",
      "name": "linewrap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "529b3675284ae76c576bcc3a88158b81c8cf2568da8ace8a3c942ade043ff3c018e815e84d7f8c20614fad640ed4a2cc8907e84e970b9d4c25a0de1baeb5541f"
        }
      ],
      "purl": "pkg:npm/%40oclif/linewrap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oclif/linewrap/-/linewrap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oclif/linewrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oclif/linewrap/-/linewrap-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oclif",
      "name": "screen",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4bf485fd760979ebf02201c59950c015152f3379be3a386f08060c93bf19250098090e704bb8fe2d3b75644bf68e91041a0dadc7f17a4d8616c5d74d0181eb15"
        }
      ],
      "purl": "pkg:npm/%40oclif/screen@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oclif/screen/-/screen-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oclif/screen@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oclif/screen/-/screen-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80a5e3e402eb29640bb181bd8e54d1991ff12a5bb11d5f99f501303488027ccd7fbb03cc0aecd55678799b04ddf8eb8165cc1220c6eab2c356466d65139d5069"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@4.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.21.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b74af306af3b9b77d571db870d41612a6cb25fef5ea3a5908d9bdfe7511afccd10efe4f7ef8269d5a522c9497418ac69f0cfce113547483be69323e0bd7f97db"
        }
      ],
      "purl": "pkg:npm/type-fest@0.21.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.21.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.21.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdb07dac22404f5adb8e25436f686a2851cd60bc60b64f0d511c59dc86700f717a36dc5b5d94029e74a2d4b931f880e885d3e5169db6db05402c885e64941212"
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4511023ec8fb8aeff16f9a0a61cb051d2a6914d9ec8ffe763954d129be333f9a275f0545df3566993a0d70e7c60be0910e97cafd4e7ce1f320dfc64709a12529"
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74ecbedc0b96ddadb035b64722e319a537208c6b8b53fb812ffb9b71917d3976c3a3c7dfe0ef32569e417f479f4bcb84a18a39ab8171edd63d3a04065e002c40"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cardinal",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "252af978e8281329ad607063356ca3acca9eb7d026da68898657ca35da8ba7ace878087428de5d44073195e723e66009ae64289a088e063df9c472eb163a81a7"
        }
      ],
      "purl": "pkg:npm/cardinal@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cardinal/-/cardinal-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cardinal@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cardinal/-/cardinal-2.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/cdl"
        },
        {
          "name": "cdx:npm:bin",
          "value": "cdl"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/cdl"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/cdl"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/cdl"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansicolors",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "417bbb04facfdbd565951c47f06c01ef1e625f9a9628000c2ea2901964de2d656534734ea55309f7576cc50008597a63b96e70aafc6edc977f9d18eb27ed29aa"
        }
      ],
      "purl": "pkg:npm/ansicolors@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansicolors/-/ansicolors-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansicolors@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansicolors/-/ansicolors-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redeyed",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14da461a8d43c9c600767aca17108c98a620a3f9882c0aad4586e47500fc129fc79363d0e7e684004c7e214ef5dd14c39ae05a1f473c3f9668ceeacdbb939b45"
        }
      ],
      "purl": "pkg:npm/redeyed@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redeyed/-/redeyed-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redeyed@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redeyed/-/redeyed-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/esparse, /app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/esparse, /app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/esvalidate"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/esparse, /app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/esvalidate"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/esparse, /app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/esvalidate"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0a9db845c91217a54b9ecfc881326c846b89db8f820e432ba173fc32f6463bfd654f73020ef5503aebc3eef1190eefed06efa48b44e7b2c3d0a9434eb58b898"
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa9080bd197db2db8e1ef78ab27ec79dc251befe74d6a21a70acd094effe2f0c5cf7ed2adb02f2bf80dfbedf34fc33e7da9a8e06c25d0e2a205c647df8ebf047"
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1329094ff4352a34d672da698080207d23b4b4a56e6548e180caf5ee4a93ba6325e807efdc421295e53ba99533a170c54c01d30c2e0d3a81bf67153712f94c3d"
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-stack",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "951f70362311715423481ddaef15c62eecf872be3026eb9795a0046d1bad1a8c104e6969ed1ef6fc33a0376d5ef237706e531697d50e24c2576ab5fde29cca76"
        }
      ],
      "purl": "pkg:npm/clean-stack@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-stack/-/clean-stack-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-stack@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-stack/-/clean-stack-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4eda5c349dd7033c771aaf2c591cc96956a346cd2e57103660091d6f58e6d9890fcf81ba7a05050320379f9bed10865e7cf93959ae145db2ae4b97ca90959d80"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-progress",
      "version": "3.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9423e84ba9dc817e3eac9bb96d2dc5fe20b3d7b919f4c3d9e9da6e4ed2342972800648725c87580772276f2d4ea5a1ad8b762523711e12433d02e5a97a526b54"
        }
      ],
      "purl": "pkg:npm/cli-progress@3.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-progress/-/cli-progress-3.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-progress@3.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-progress/-/cli-progress-3.11.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0ac90450a63274b08a7ad84ad265d1ac8cc256b1aa79a1136284786ee86ec954effd8c807a5327af2feb57b8eaab9e0f23fdcc4a4d6c96530bd24eb8a2673fe"
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3128d8cdc58d380d1ec001e9cf4331a5816fc20eb28f2d4d1b7c6d7a8ab3eb8e150a8fd13e09ebd7f186b7e89cde2253cd0f04bb74dd335e126b09d5526184e8"
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf29a6e7ebbeb02b125b20fda8d69e8d5dc316f84229c94a762cd868952e1c0f3744b8dbee74ae1a775d0871afd2193e298ec130096c59e2b851e83a115e9742"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ejs",
      "version": "3.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fec5d978c9614b402b91f5f6030efcd202735d230f9ca8edb29619bfe7f736228b96e6decc01c3539fbdc73ea0777fcd846dedc500a8eb19609664d2fa84c611"
        }
      ],
      "purl": "pkg:npm/ejs@3.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ejs/-/ejs-3.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ejs@3.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ejs/-/ejs-3.1.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/ejs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ejs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/ejs"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/ejs"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/ejs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jake",
      "version": "10.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b15a7161eb80856b743935884f04fdf28c95d06b17c8c957085fb72f54ae69f055508affb882c6441f8dab09338605cabe82690c8a50bea91400b81d990b10c7"
        }
      ],
      "purl": "pkg:npm/jake@10.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jake/-/jake-10.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jake@10.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jake/-/jake-10.8.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/jake"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jake"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/jake"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/jake"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/jake"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "3.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88007e25b0c41978722146afa0397d58ffc98f5d3a2b3f43127d433e0630e6bb839f47b75a08b7b0a166e79b0049d18134e401f05e7d77da90edd7aaac703cc1"
        }
      ],
      "purl": "pkg:npm/async@3.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-3.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@3.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-3.2.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filelist",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c35704b9fdd2f83acb0902fb113ea4cfe82694975babd27bc970928cafce6423c0faa10dd56c85e1901fd186096b8fec84726b6b6b7f77fafc495e098bec7ef1"
        }
      ],
      "purl": "pkg:npm/filelist@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filelist@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filelist/-/filelist-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f533c11866a4e271df199b0f068866f405a0e8da13ed04c27a14b704824006c97265bcf17d5efc40cd98ebe8bbe3538f64869f1406a2884321e4ec88ac93e0b6"
        }
      ],
      "purl": "pkg:npm/minimatch@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e7008bd0f1e33e902e9a50bc7ac2e422c15b27cec8bd7775b1cd5dc5a564c6035f45eb6d64c1d6ec01c14a5e02941d95accbe998ea22f5b074f1584142cad0c"
        }
      ],
      "purl": "pkg:npm/brace-expansion@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f"
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "882b8f1c3160ac75fb1f6bc423fe71a73d3bcd21c1d344e9ba0aa1998b5598c3bae75f260ae44ca0e60595d101974835f3bb9fa3375a1e058a71815beb5a8688"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "9.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c8376667a94b7d3fec1485a91be8a370ce310bbb223ab13b99c20edfb333d5d68dbdf75a0ef388d4fe42fa9bb9cdfe816a733b4d89b9b5729361b866fa3539"
        }
      ],
      "purl": "pkg:npm/fs-extra@9.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@9.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "fs-extra"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "at-least-node",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faafedec492fd440d8da5e8675ae8b2e25f5e2b53d4d5db459ade87de426c0f1596ce328f435eb2db3a315a69c9645ca5a27486a8a7000e6d00eac16b46523aa"
        }
      ],
      "purl": "pkg:npm/at-least-node@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/at-least-node@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f41ca1b2c4767cf56c3598f8efca9451b29f98bd3eb790435728d286dc9964b88aed90c002b1457e8a723938f4334e70136b493e2b00e224e79d79766283ef38"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5d8277563ab8984a6e5c9d86893616a52cd0ca3aa170c8307faebd44f59b067221af28fb3c476c5818269cb9fdf3e8ad58283cf5f367ddf9f637727de932a5d"
        }
      ],
      "purl": "pkg:npm/jsonfile@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-6.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84066c2aaed8cb5d59bb50c4d0ecd68f0ee79cb6662596130d96721051d9754855f05907e4c09fa14d5731ac57a2fa725b99eae6c70faaad190cff59ca5d38a1"
        }
      ],
      "purl": "pkg:npm/universalify@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-package-type",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a63cee2ad63ae0661f5a2ccd009d1fafd56ab6d6643622b6892e37d0bb481f38c112be9b5fc026db39b8b16e11a39c23596e5c02544bd6a00c4dc5db8cd00ed9"
        }
      ],
      "purl": "pkg:npm/get-package-type@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-package-type@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-package-type/-/get-package-type-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "11.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e121768ecf2d6c6fc232a1c6abb964a7d538e69c156cf00ca1732f37ae6c4d27cab6b96282023dc29c963e2a91925c2b9e00f7348b4e6456f54ab4fd6df52de"
        }
      ],
      "purl": "pkg:npm/globby@11.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@11.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-11.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c6cb1a0e4d853208ceacb547ba1098277781287b0008ef331d7ea3be9068e79599810f3fdc479a5ff2bfdc4785aaeb4b0bfe9d0891c8d41043f04b7185ac8cb"
        }
      ],
      "purl": "pkg:npm/array-union@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dir-glob",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a4ad6a7d191e0a5df28663338b993b86562d545857f0b37efb9fd71ce79fed6fa0eeab217aa5c43901b88712c85a0e963dbfaa1a4abd9708389d1a633077320"
        }
      ],
      "purl": "pkg:npm/dir-glob@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dir-glob@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dir-glob/-/dir-glob-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80329bf1a64c0de0ffb595acf4febeab427d33091d97ac4c57c4e39c63f7a89549d3a6dd32091b0652d4f0875f3ac22c173d815b5acd553dd7b8d125f333c0bf"
        }
      ],
      "purl": "pkg:npm/path-type@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a6c606068843c22e17cb9e93e9d4ca119a27f01083a08dc1d7c4e063bfb998f7a73e79649cb0e3fd735d766722dd5878b41711e323ee2e561298a7f81c75199"
        }
      ],
      "purl": "pkg:npm/ignore@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-5.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83d43585a79bcb7e8e492b706f89ed08618668ab1a5528d0ebc7c1c6841cbad9797d2d6fb98d7c1f7c12b778c5c85b6b931f8acf45751bce40e0cc80743322d9"
        }
      ],
      "purl": "pkg:npm/slash@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hyperlinker",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f2f146e545614471f4ae21a6a3337e0b74f5c885bb356a3117fc104fbf6e09f9e9d255a11563adf143a9533bd551612e4b028821206d080c9fa9f883f329441"
        }
      ],
      "purl": "pkg:npm/hyperlinker@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hyperlinker/-/hyperlinker-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hyperlinker@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hyperlinker/-/hyperlinker-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11d0c366ee00d8ec882bb2ebff6cc6fb0e6399bba4d435419c4c11110bc1ceca412640846d16bc1b153596085871a1890a745689b8c35e5abbefd5f5ff2e71c2"
        }
      ],
      "purl": "pkg:npm/indent-string@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-wsl",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cacc0adad2b18951407018180d90766e4e865c9fe4ed5c7a5e0a09a430930c631d6c40361a092ca32414826b69c7d431a6eecde7d68067a21a154c168decbc3"
        }
      ],
      "purl": "pkg:npm/is-wsl@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-wsl/-/is-wsl-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-docker",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17e8b604ab05ac7eba89a505734c280fcb0bcbc81eb64c13c2d3818efb39e82c780a024378a41ea9fcfcc0062249bf093a9ad68471f9a7becf6e6602bef52e5d"
        }
      ],
      "purl": "pkg:npm/is-docker@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-docker@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/is-docker"
        },
        {
          "name": "cdx:npm:bin",
          "value": "is-docker"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/is-docker"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/is-docker"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/is-docker"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/js-yaml"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/js-yaml"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/js-yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natural-orderby",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7b2931f1534094adc3977bad997eb6f9675de72ef3e149647fb28de416e954414d2c814965d99d0bc29b0b377e7578e383fa1446bbf17583eeb10df3de0fef9"
        }
      ],
      "purl": "pkg:npm/natural-orderby@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natural-orderby/-/natural-orderby-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natural-orderby@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natural-orderby/-/natural-orderby-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-treeify",
      "version": "1.1.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1055630187f35aa5ac04c4473cc0172c20c8267a4c85d580a91ef11ba33a6b672ce8f305a65ffe676d30f730d6e2f9313857dd75e8012aaf517a17746f1584ec"
        }
      ],
      "purl": "pkg:npm/object-treeify@1.1.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-treeify/-/object-treeify-1.1.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-treeify@1.1.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-treeify/-/object-treeify-1.1.33.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "password-prompt",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e9b8185139dae1b8ddc4ec6fe4a008eed168d5c3dfee40e1b90a8e66a24363d0c88e4815594b5253c0ce33979e61bb4585988105bcef5c53db0942204861e20"
        }
      ],
      "purl": "pkg:npm/password-prompt@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/password-prompt/-/password-prompt-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/password-prompt@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/password-prompt/-/password-prompt-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "701869adee266be5344f5a0ce5f5e0ec3cb5270ef3cf0bfb96dfc6a02a6bfa10d02686272953cb2f8742bd210532642eace42f4abc13ed22ff0c0961048f7b45"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "6.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79354bac14adedf8db0f2833f34e69327b2d22cd954c1364466d2ac5977e33b0395c377155158ee4cc460576618d8e1ca8b60b76dac6a917fc9813e6cf04a959"
        }
      ],
      "purl": "pkg:npm/cross-spawn@6.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@6.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nice-try",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d67878e5d79e6f9a25358ede5fcd8190f3bb492c51e524982623d3ad3745515630025f0228c03937d3e34d89078918e2b15731710d475dd2e1c76ab1c49ccb35"
        }
      ],
      "purl": "pkg:npm/nice-try@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nice-try@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c41c62824a65120cfbf8ba88fc0250fe8e83e5ab7a5e343f87458cb1173e0a3f0e33f76e92fdbf2b22e16cd85609837070b3125fe80f7fdde21d2da602fbd0f"
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1ab9a0dffcf65d560acb4cd60746da576b589188a71a79b88a435049769425587da50af7b141d5f9e6c9cf1722bb433a6e76a6c2234a9715f39ab0777234319"
        }
      ],
      "purl": "pkg:npm/semver@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/password-prompt/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/password-prompt/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/password-prompt/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/password-prompt/node_modules/.bin/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "115dcbd7e510586a2bdb53a69efa232b7ea6860f93c8828387788504a06886be71797221341731f2859d8244c4110f8110515874b46ea8c7dde4bf3837557956"
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c29a12140c72b3a6f66b6c076755e90d2803ecdf62563836f4f87db95fee68ff44c7f2979644d94de75dc433d2610a60bf328b18991ed94534033a060a3348bd"
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221"
        }
      ],
      "purl": "pkg:npm/which@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/password-prompt/node_modules/.bin/which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/password-prompt/node_modules/.bin/which"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/clipboardy/node_modules/.bin/which"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/password-prompt/node_modules/.bin/which"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/clipboardy/node_modules/.bin/which"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/password-prompt/node_modules/.bin/which"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "7.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "425613b9c51839ec2cf96784ba30e8106ce2cf82ba738ed5fc177e2e349261c03de29f8398835d7fb9dc6948a74e17ef672bb5de537d398d570f1b7c0b44f0d2"
        }
      ],
      "purl": "pkg:npm/semver@7.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-7.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-7.3.7.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/semver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "268e9d274e029928eece7c09492de951e5a677f1f47df4e59175e0c198be7aad540a6a90c0287e78bb183980b063df758b615a878875044302c78a938466ec88"
        }
      ],
      "purl": "pkg:npm/lru-cache@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec"
        }
      ],
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "8.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3295043763a876d533c6f29097bd9c505ed14391221ec1af4ac546d226bd73945b5862f6088e02ec4a4f4bc513048a659e5cd988db95e7ac3e16e371cb7b72d9"
        }
      ],
      "purl": "pkg:npm/supports-color@8.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@8.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-8.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-hyperlinks",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eac5c4cd5e7e2398fc066abdfef52984644cfd124d4fd48251124b8f07ce839d61791b60b86583cdc6819600332a141ad0454da4f10acd0b81c19f12f1668279"
        }
      ],
      "purl": "pkg:npm/supports-hyperlinks@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-hyperlinks@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-hyperlinks/-/supports-hyperlinks-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "widest-line",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36c9a85da96c5950cc1aea71679474f246bd7e56638e22ef1d501660e2ad88a33cba3b595abf5c45f7da93eb92138f3e39bf0e6da957a70c9e522c830fa40582"
        }
      ],
      "purl": "pkg:npm/widest-line@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/widest-line/-/widest-line-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/widest-line@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/widest-line/-/widest-line-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6151888f691a98b493c70e8db198e80717d2c2c9f4c9c75eb26738a7e436d5ce733ee675a65f8d7f155dc4fb5d1ef98d54e43a5d2606e0052dcadfc58bb0f5e9"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oclif",
      "name": "plugin-help",
      "version": "5.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ef1ff46e6c9c6a0a29cfd2f51640b4ce6e84fe49f8df2fc878d2cf8fca69166a5748717969a116895f9d2fcfe4a3648b3bb9ec19c0493c7f32eaa45fc159796"
        }
      ],
      "purl": "pkg:npm/%40oclif/plugin-help@5.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-5.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oclif/plugin-help@5.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oclif/plugin-help/-/plugin-help-5.1.12.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oclif",
      "name": "plugin-plugins",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "060b7e4294e55fbf90d0791582d6d4198425a3f872ccd0406971f9975ea8bbd262e707e2e53fa7895e40cd0d7847b245f190ce4db50e53f351049d9bccb09a65"
        }
      ],
      "purl": "pkg:npm/%40oclif/plugin-plugins@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oclif/plugin-plugins/-/plugin-plugins-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oclif/plugin-plugins@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oclif/plugin-plugins/-/plugin-plugins-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@oclif",
      "name": "color",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa362bfa2ce059d2153aba2204aa93cd081cd6be5677d401d49ef218cd8479e96a8410118a254b4592f8e6f855e337724d17439194b4101cc5c106a9fa79622c"
        }
      ],
      "purl": "pkg:npm/%40oclif/color@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@oclif/color/-/color-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@oclif/color@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@oclif/color/-/color-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-call",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a1c229ac0b6dc8084e243e5f714c18ca0788a76d169e2f265e46e9c2ff5272fd9e97f2dbf6d8c1008caf8a04e31254b6aa5cf4d399df3adfcc1a54828b1b1db"
        }
      ],
      "purl": "pkg:npm/http-call@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-call/-/http-call-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-call@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-call/-/http-call-5.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-retry-allowed",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4546d478ac2f9b75c6d9561a9a124bd71164b608ef3f32f41eaf02fbacab588b300f2dc12171aa0b187191cdf437d8ea2b7d75815535dfb2bc122e79ff354946"
        }
      ],
      "purl": "pkg:npm/is-retry-allowed@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-retry-allowed@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "845a222624e5eb79e7fa4b2d1c606d7b05922a740ba726f5e7928785e035977f6ebed3bd9d6228a75a77b9da8f71477fc5b17554b30ee27ece23aa7b45b9e00e"
        }
      ],
      "purl": "pkg:npm/is-stream@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68e228b3c6ee8c637ddfff0ec7f8cf2e1ed1c159cf132b329d5144f9f419ca0ea32842c41f0ce029d2d11475205c92fa9329628d54810b806f37d3a6b01e3c47"
        }
      ],
      "purl": "pkg:npm/parse-json@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edd147366a9e15212dd9906c0ab8a8aca9e7dd9da98fe7ddf64988e90a16c38fff0cbfa270405f73453ba890a2b2aad3b0a4e3c387cd172da95bd3aa4ad0fce2"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf3d3a4bcb74a33a035cc1beb9b7b6eb37824cd5dc2883c96498bc841ac5e227422e6b38086f50b4aeea065d5ba22e4e0f31698ecc1be493e61c26cca63698ce"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-parse-better-errors",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9abab264a7d7e4484bee1bea715e961b5c988e78deb980f30e185c00052babc3e8f3934140124ff990d44fbe6a650f7c22452806a76413192e90e53b4ecdb0af"
        }
      ],
      "purl": "pkg:npm/json-parse-better-errors@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70918fe3425cfd55d4b29f3f3ab9f22b24d9d72eaffdda619b76e2a12f91aca5e32b6041eb01d477a269b591050c68066a1313f889e764ee62d448bd9a90bc07"
        }
      ],
      "purl": "pkg:npm/load-json-file@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-5.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b81f3490115bfed7ddebc6d595e1bd4f9186b063e326b2c05294793d922b8419c86914d0463a9d252b082a438fe8e00815b8fb18eadcb9d739a4d8d9fa0795da"
        }
      ],
      "purl": "pkg:npm/pify@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdabc03115ce80154d17a9f210498bdc304ad7d891a437282305beb3043e09b1a2bbb963bbab7e264940d4c1f07a85ad69d82de0849552c5cbc83ab7e1d75cc0"
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7141899c276be124db78f0a0a8d15ba553427a96be900568849b35b0b871cdd1fe82712839df1585b61aee90f7cd9606894456336c731082377d07118b30e461"
        }
      ],
      "purl": "pkg:npm/type-fest@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b8f16cd95bbefbce1348ae7ee0c4e94848d02a8bd642fee4059d175b7881e1661080e94aa990e4fc4f51bb06f7dd80fe04afc805e2c51b692d22ed0bc87c25b"
        }
      ],
      "purl": "pkg:npm/npm-run-path@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2399e374a9dfb2d23b3312da18e3caf43deab97703049089423aee90e5fe3595f92cc17b8ab58ae18284e92e7c887079b6e1486ac7ee53aa6d889d2c0b844e9"
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yarn",
      "version": "1.22.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff4579ab459bb25aa7c0ff75b62acebe576f6084b36aa842971cf250a5d8c6cd3bc9420b22ce63c7f93a0857bc6ef29291db39c3e7a23aab5adfd5a4dd6c5d71"
        }
      ],
      "purl": "pkg:npm/yarn@1.22.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yarn/-/yarn-1.22.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yarn@1.22.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yarn/-/yarn-1.22.19.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/yarn, /app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/yarnpkg"
        },
        {
          "name": "cdx:npm:bin",
          "value": "yarn, yarnpkg"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/yarn, /app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/yarnpkg"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/yarn, /app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/yarnpkg"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/yarn, /app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/yarnpkg"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "cli-kit",
      "version": "3.0.25",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f51503fbf3ef680a5e61227e3964f80762c91c61530b62a542336b7367839eaea34af89c1130f8f48681d2c202b4ca3dcfa66e1e691c8cc37b54572e151b117"
        }
      ],
      "purl": "pkg:npm/%40shopify/cli-kit@3.0.25",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/cli-kit/-/cli-kit-3.0.25.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/cli-kit@3.0.25",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/cli-kit/-/cli-kit-3.0.25.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@iarna",
      "name": "toml",
      "version": "2.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6b9ec018c54df19d2d603c73f253deb57281722e48788000ffd334399b2998e32399f8262fb0fa946ce152c34683338cb4b55eed885c4bff55df5cf342e883e"
        }
      ],
      "purl": "pkg:npm/%40iarna/toml@2.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@iarna/toml/-/toml-2.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@iarna/toml@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@iarna/toml/-/toml-2.2.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "change-case",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d2c58db0b3d3adbe220b1b51226392bb34dc64aa0fc99d19c5c4bb4a43de896af8a22318bb76332b49dd04093f400be96db429666302b0e77056a4e31b968ec"
        }
      ],
      "purl": "pkg:npm/change-case@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/change-case/-/change-case-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/change-case@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/change-case/-/change-case-4.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83119606b4d3d49b8cc7a47ea393d35cc9949e19d5ccb43d48dbad0f862a2ad23a6a9f3deedded28409895aea0096124a655e794dc9b124660f46106c4a14283"
        }
      ],
      "purl": "pkg:npm/camel-case@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camel-case/-/camel-case-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camel-case/-/camel-case-4.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascal-case",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b969464f76129caf71dc140968e75c670ae757a84fa5df23147d7fb9ca622d13e1ff6cc2549292d7d1381af607bda09c0029f77e85d9d1c2c1f56af1d4a19ee6"
        }
      ],
      "purl": "pkg:npm/pascal-case@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascal-case/-/pascal-case-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascal-case@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascal-case/-/pascal-case-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "no-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e000dde318087e468c541991d348e2c922a51cdb09a8070191e2d6e93402a69a8bc5a16ab439d4646f456495d45e3b66b68814ff384ba51bd5d251cd74af7ce"
        }
      ],
      "purl": "pkg:npm/no-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/no-case/-/no-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/no-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/no-case/-/no-case-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edf9b797734017d59f37a5b724e99fe5daf0a55a97efc26da0627703a5b46ba66795d338d70d9f5790f8f74a6c2854e931db3c4c9b1efde1cb145b0d1c78c782"
        }
      ],
      "purl": "pkg:npm/lower-case@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case/-/lower-case-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "capital-case",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76cdfb5bc0b2b478309e11864e2f3ca5c3f2475e6aa0d90ea58c2630c7e75aaa9680449aa4baaf0f1ea1b858d0e6fa964a7d99d3ad7bdd7340ecbb4c39e521d4"
        }
      ],
      "purl": "pkg:npm/capital-case@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/capital-case/-/capital-case-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/capital-case@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/capital-case/-/capital-case-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case-first",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e75e29a581c168ac1f2512bfa4d0ba73f3b17c66b4a1b4a7025d74eaef7b11dd08eb6e4d8a7f7a2808edb5917a64bdded572eda61c67aab3a2f625a09bebbe6e"
        }
      ],
      "purl": "pkg:npm/upper-case-first@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case-first@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "constant-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "236852062ed5becec112e243af97431dfcdbfd1ba3dc5caf17287b28b8a5023350c3705efb182a5010365bab1c54470bd212f57703d1b48a843d55022a44acc9"
        }
      ],
      "purl": "pkg:npm/constant-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/constant-case/-/constant-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constant-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/constant-case/-/constant-case-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a07600c626dd93a6ec015088e01ba973c36196151096f5091f922bf40f1a871cb6091e6b6675420a71977cac78054a3a29553970ea08330a6d5bf0c150c2292"
        }
      ],
      "purl": "pkg:npm/upper-case@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case/-/upper-case-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case/-/upper-case-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afe672a587ac91addac6bf1789d9ee72d9e454a64528b085b8036012dfccf04b3dbbceeeee7c3c103e2e4986cdd702518d7ad9776e69c6850b0cb642899e3df"
        }
      ],
      "purl": "pkg:npm/dot-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-case/-/dot-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-case/-/dot-case-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "header-case",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ffbee9394c4115670ad1d25a76cde77d382a35b8020b325c742443200b6eabcf2249dcdd6fe979301c75c941d4767684a37063cce8e28f6282607f4a65275d5"
        }
      ],
      "purl": "pkg:npm/header-case@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/header-case/-/header-case-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/header-case@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/header-case/-/header-case-2.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "param-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "457963ef3098a2445ea96a4e3c7f68622bd4ccb619e6f00f21f1260933558a8b02efc17c1741fdcbb4fb806d8cdfdca682eb7117981c144b326504a987d069dc"
        }
      ],
      "purl": "pkg:npm/param-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/param-case/-/param-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/param-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/param-case/-/param-case-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8ee2a0858d7a954eb71b3edfe141f85343e56116ca8d28e3edcad80d2a42b14a8129dd73d443c39b16e78fca5388a24e608e7ebdaf2f178942f10b0a2ddd67e"
        }
      ],
      "purl": "pkg:npm/path-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-case/-/path-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-case/-/path-case-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sentence-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0b4b42489da40c091a10ed8532b40a3fc54bb95b65e74315761c8ffab8ce94ec22134b546a3c496bdf457ab88ab230a33d949191545cb9ff80aecdc8b13584a"
        }
      ],
      "purl": "pkg:npm/sentence-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sentence-case/-/sentence-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sentence-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sentence-case/-/sentence-case-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snake-case",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c03a1e33f3d6c642f97da457cd17c575e3a8bba3bfc2a853dbab36203fec98cc3203792f4768d16d5c005a9915be010cc454e0dcbc4efd96327ef1af5849d32"
        }
      ],
      "purl": "pkg:npm/snake-case@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snake-case/-/snake-case-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snake-case@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snake-case/-/snake-case-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-json",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7dd5ac8abc2a6ad20873468724e13de17dd6d2a818a855ae64d8a47361e4565c33bed53dcac59d4451dd05b81d67b703206e236743ebd35df5a1695ef233f4f"
        }
      ],
      "purl": "pkg:npm/color-json@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-json/-/color-json-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-json@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-json/-/color-json-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bda40870d236b511d6f91957481759a3670fc0488d0095285733cdd45067b60d5af94dd00f100d4e03c9bf83ccd6a7dc7a3a7ee0aae7d8f856ad0db0b730342"
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "conf",
      "version": "10.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3d16fd4cbfee80d09a686b243c26578da7786191b3893ff45efd0f90ab130f1cf900055b118d0196667f40e4672a2e24cd0ba77cf69d8f0796611d50d2330ca"
        }
      ],
      "purl": "pkg:npm/conf@10.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/conf/-/conf-10.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/conf@10.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/conf/-/conf-10.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "8.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c06829add0af31a942d01ced5ef8ad0f6842d3861f7c0bedb149fddc96c65d82c0b4250ee31775ee6082650c54388b6207066f252716a3c348bd0310ef5adda6"
        }
      ],
      "purl": "pkg:npm/ajv@8.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-8.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-8.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "34cf3f3fd9f75e35e12199f594b86415a0024ce5114178d6855e0103f4673aff31be0aadaa9017f483b89914314b1d51968e2dab37aa6f4b0e96bb9a3b2dddba"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dfd2759ee91b1ece214cbbe029f5b8a251b9a996ae92f7fa7eef0ed85cffc904786b5030d48706bebc0372b9bbaa7d9593bde53ffc36151ac0c6ed128bfef13"
        }
      ],
      "purl": "pkg:npm/require-from-string@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d1b118dd7fe8f99a5fb2ffa18a1cf65bac5ffca766206b424fb5da93218d977b9a2124f0fdb1a0c924b3efa7df8d481a6b56f7af7576726e78f672ff0e11dd0"
        }
      ],
      "purl": "pkg:npm/punycode@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-formats",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b1d0ac79da1c44ec2d7c8643048206251227ea599b58691828b89a2bf9631d3e743210ad77be0116c9536ea7b4a879ea0b32caf891fe61e9d396d75235e4c50"
        }
      ],
      "purl": "pkg:npm/ajv-formats@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-formats@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-formats/-/ajv-formats-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atomically",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dccfd974cfbcbdc90f6b7436b1966688e2e2477ff4fc83d84e13325cb04a97d928c28f8276d2e2bbfa57640c731ba490caefac05ef110883173fbd296c7f0e7"
        }
      ],
      "purl": "pkg:npm/atomically@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atomically/-/atomically-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atomically@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atomically/-/atomically-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debounce-fn",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f296024222fd5dd720d143d20f777ed0a3253a3a7e28653910fc1875d83343b0c04ec8387ee5038d0b6c60b9968e7936a1b9cd1e0577bc4d98e237a348e25505"
        }
      ],
      "purl": "pkg:npm/debounce-fn@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debounce-fn/-/debounce-fn-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debounce-fn@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debounce-fn/-/debounce-fn-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62c6e2f6e616f611727eb4e1743110bb290de04cba06ec0f0f6929239112fe71530e7ffdf32c5834b64972050028f4ff99cacb2ca686cc947d615c49ac874049"
        }
      ],
      "purl": "pkg:npm/mimic-fn@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-prop",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b44ef3b58cd71c87b2bdcecdfa1477a22ec521b7ff3488d53fd86602ddf2317ceb434ef6fdfa6318bc761b13711b1525e55ef7304a98ce2a0e32856118c27970"
        }
      ],
      "purl": "pkg:npm/dot-prop@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-prop@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-prop/-/dot-prop-6.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76ba831b771b733c7110946839770e8ed769d49fe5ca9d66367d316b39d1b3cfa6b8186041cae76eca68c795f97cec341e73276df0f3be710c12da83109128f3"
        }
      ],
      "purl": "pkg:npm/is-obj@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-obj/-/is-obj-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "env-paths",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa1d6590b2a164c4d88e8835544a49346ecd64959cb9cd830e4feab2a49345108e5e22e3790d5dd7fb9dad41a1a8cc5480097028d67471fdaea9a9f918bb92d8"
        }
      ],
      "purl": "pkg:npm/env-paths@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/env-paths@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-typed",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec313c9a91befdf570f9d4e98dbc67c78ed368c9c37ce2358f07edf60d55c9b96d64276ec9140f24fbdcfb3cca63d58f1f184f59ccf216e61ae88f0cc38894e4"
        }
      ],
      "purl": "pkg:npm/json-schema-typed@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-typed@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-7.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "91ba5a4921894d674063928f55e30e2974ab3edafc0bc0bbc287496dcb1de758d19e60fe199bbc63456853a0e6e59e2f5abd0883fd4d2ae59129fee3e5a6984a"
        }
      ],
      "purl": "pkg:npm/onetime@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-5.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672"
        }
      ],
      "purl": "pkg:npm/mimic-fn@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-up",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c3cb04e1164d62e0140ae2dc0f43a4c0e114fc6c363deb27ae0950562f778f0110a210a0d14ab3466c5220509a4ba7e5de211eb9bfcadaed6b89385501b6430"
        }
      ],
      "purl": "pkg:npm/pkg-up@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-up/-/pkg-up-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-up@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-up/-/pkg-up-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d720fa4662c8d5705fc6e82f391c25724e9fef9b582fe891d23ab0b0eacec4c672198a94b83849d25e005dd3b5897fc54ecf5c040304935816484c759126f296"
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec03bbe3cc169c884da80b9ab72d995879101d148d7cf548b0f21fc043963b6d8099aa15ad66af94e70c4799f34cb358be9dfa5f6db4fe669a46cade7351bae4"
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7ed76c3f4e8fb81857e0261044a620dc2e8cd12467a063e122effcf4b522e4326c4664dc9b54c49f5a3f5a267f19e4573b74150d24e39580fbf61fb230ba549"
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75"
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e90bb198c220d8438c182def8503c96146385008c7101ae4a0186a83920fd07ab456c3d0a61914f4892395452649dbd34c2d9808cea6a58c9eb7a1a2f834825"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-zip",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "304cc67d9a34aea135d0efc1f8011c09224b66cad6b9152f9aa253a8736a06d00b85a25cdc4de2c4b18b24d4d1cc40362b7e306e63870b87f062cf6c56c75c08"
        }
      ],
      "purl": "pkg:npm/cross-zip@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-zip/-/cross-zip-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-zip@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-zip/-/cross-zip-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "6.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9af0185aa5f3f425424a0bfcd5f721c70d6feb0e80f13f86619f702403aff14fa818ee361726269ec816739d856e8e1659113f9481c6d9890eec3775aa7089a"
        }
      ],
      "purl": "pkg:npm/del@6.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/del/-/del-6.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@6.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/del/-/del-6.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-cwd",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3de366d372287c7dd24f266407173912efa3443fc2b3cef9b0f76717b1acdbf229edc0ba8f89b3cf7577f800d74a577ad832eb90606216b6fcfd262941dcd15"
        }
      ],
      "purl": "pkg:npm/is-path-cwd@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-cwd@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "15de200016fec9c18098aa2ef1e31fb42ba94a2af9951c6a7f8683fef774703daa7381cbd3b3a309eb8732bf11a380a831a782283074fc40813955a34f052f3d"
        }
      ],
      "purl": "pkg:npm/is-path-inside@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-map",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fdb8ceaa68044c1601e41a0478655e6bc766bc76f69bd18bcb513d5b8df27b27cfe9040264614d6be5d171e244b8307aceaafe80aa4802694b79b329ca4c3f31"
        }
      ],
      "purl": "pkg:npm/p-map@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-map/-/p-map-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-map@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-map/-/p-map-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aggregate-error",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e08ed3774d6ab96fd1a6871f35ac85745564d6a4aea21d04ec9adb449d7a9c7d351e128543cf0836af5277e9ddef6cea4724a5afd0660c0f3194427abc932b60"
        }
      ],
      "purl": "pkg:npm/aggregate-error@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aggregate-error@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aggregate-error/-/aggregate-error-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-stack",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1d882f4769313e29100c5a10e1ac63840a0599c687af31ce5396439b32a352b1553ad8f6335d9fd23138f3c8600517562eb20c46712593117061a7408fc10d4"
        }
      ],
      "purl": "pkg:npm/clean-stack@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-stack@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-stack/-/clean-stack-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25990931990018514f3f662a5d95cf6cc94c060b31cc4f082ece253085ffda8d0bf54070f4efd8de8eb0170fe2f582daa5c5095b0a9b8b791dc483dd0bad9320"
        }
      ],
      "purl": "pkg:npm/rimraf@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-3.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/rimraf"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/rimraf"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/rimraf"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5"
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f"
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enquirer",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca33673ebdf5e7f1634b8cc8b14c5882e6143cfd9ed4d2b877b13b64e2e2c9809c6c50624ccc880fedb0be6db0ebea59fe874c03b71192386c3db96dc013ab2e"
        }
      ],
      "purl": "pkg:npm/enquirer@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enquirer/-/enquirer-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enquirer@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enquirer/-/enquirer-2.3.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-colors",
      "version": "4.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffac3f0b6d4f9b503b6998ad948e4d8bfd89e8515037c8b50afcf79070010006f0f77bff365bca7553aacfb0825b3ff78affc9a6545210467cdd720e375e68bf"
        }
      ],
      "purl": "pkg:npm/ansi-colors@4.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-4.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-colors@4.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-colors/-/ansi-colors-4.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "env-paths",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76d2544dea73316dcb9bf34fc517f7c0fe3ae365168632f6b10c5cfb29b660c8f59bf1f6cc33503a57b369fce41f09fab0cb2d8c74f01ba89042c72d0d6fdbd4"
        }
      ],
      "purl": "pkg:npm/env-paths@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/env-paths/-/env-paths-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/env-paths@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/env-paths/-/env-paths-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "envfile",
      "version": "6.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46786d570ddab8365e7a1e55b5a36b6c4eece8aabc06846d188cdc6cca4cb09fb0229460b398e20c6e204235bebdfc2ce503e58b3139eff7d45344e3e8daecf0"
        }
      ],
      "purl": "pkg:npm/envfile@6.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/envfile/-/envfile-6.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/envfile@6.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/envfile/-/envfile-6.17.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/envfile"
        },
        {
          "name": "cdx:npm:bin",
          "value": "envfile"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/envfile"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/envfile"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/envfile"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "6.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4155a55f67b9d2179825c08f1b4896b5ff2bd318c461fcff3982c60d81fe2328d67b3ccf371cfadea3453aed25e187ed196ba2cc55591c7b3c3eb2d4e69d880c"
        }
      ],
      "purl": "pkg:npm/execa@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-6.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "execa"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8910cf24a50f544343edd1cf3bcae46ce9cfa720f281c0c5b568e9796342832f163f6ad77315cbf13b2445e425e8eac1d86efe509ada82cd6ad7916e75cec6eb"
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907c6bdb366962d766acdd6a0e3aeb5ff675ad1d641bc0f1fa09292b51b87979af5ecc26704d614d6056614ce5ada630d7fc99a7a62e0d8efb62dbdb3747660c"
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efef9d161b5cc77df9dee05aabc0c347836ec417ad0730bb6503a19934089c711de9b4ab5dd884cb30af1b4ed9e3851874b4a1594c97b7933fca1cfc7a471bd4"
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04b2374e5d535b73ef97bd25df2ab763ae22f9ac29c17aac181616924a8cb676d782b303fb28fbae15b492e103c7325a6171a3116e6881aa4a34c10a34c8e26c"
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-2.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/node-which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/node-which"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/node-which"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/node-which"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6ce968beda3de3423aa2ef4c3902537c0c59e44b00be32a9b113374400b076a976585775ff6f50937e03cb18934c7805b174f7d4f053b59acdcd51f68708f62"
        }
      ],
      "purl": "pkg:npm/get-stream@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-6.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "human-signals",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad02ec9319ccff938295d1e8fb03576e95600e7e40d7b094a0a5feed2a24c1a92796aec27529e9872d16dfd194f1dc39f578825e61570e0e1f46e72441129ec1"
        }
      ],
      "purl": "pkg:npm/human-signals@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/human-signals/-/human-signals-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/human-signals@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/human-signals/-/human-signals-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e7411e1b67d2000c345292fa6a306bedfed10959c9739253604b0e3c57910068078377aa86bcdf1e8ba939a74b6fc52475ef55661b21ee4e200e7f101bafc90"
        }
      ],
      "purl": "pkg:npm/is-stream@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf"
        }
      ],
      "purl": "pkg:npm/merge-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0939d9911ab636b2335344c6d2be5b90aa0fbc5fb64aeb5cafcc11080e1cf87fccf54d9158001b2a8e308177fd0f50d13d33a403807257424194126ed0fa5f5"
        }
      ],
      "purl": "pkg:npm/npm-run-path@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85a444ca9abbc6433b12b7e0232034cfe063e0018a94c49d9501368ef268ea1b960f511d90a615f86fd3e27ab4604176be04d3f24a8c14aa35b879fde74af849"
        }
      ],
      "purl": "pkg:npm/path-key@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d45951fa08d72bb5fe02c007b28df9327c8de4aa86c09462ff7d5fb7ac74335f7886ded2fab580bddecf1ecb3dc5228ccc4d1ab2fd69c881da258abe05b69c01"
        }
      ],
      "purl": "pkg:npm/onetime@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bea882d3a0ae8414d47591fe45897cb05acbd3deaf038e4e9392123bab04fccaf58d16c61f80ac9e18bc7f7c0a565ef1f263b802eec8afd0f73b2bf555830527"
        }
      ],
      "purl": "pkg:npm/mimic-fn@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19"
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-final-newline",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74e112aa362bf7a89663294639bcdddfd12e3536b9549c72bd50049b926787b286a3be55e371e4d6874f424343c97366511ea4fa01220d55e78c1f0727772b5f"
        }
      ],
      "purl": "pkg:npm/strip-final-newline@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-final-newline@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastify",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d105c4a7ef1c78a7347f055a91e04b33fd52b3ff9f73b6b76aebb2813fb51a36d20201dfc2ac52b9c52ebb4ad88f38aedf65201195df8c8b5837f6bcf4758a87"
        }
      ],
      "purl": "pkg:npm/fastify@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fastify/-/fastify-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastify@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fastify/-/fastify-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@fastify",
      "name": "ajv-compiler",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa144c33171499daad9c218fc2b236c9ccc5765829dc8051f3c5a53cb8a65e58116fcbc70535f3dfc235ed1ffdba2fa122df63c74b8e75928e8acefb568a077c"
        }
      ],
      "purl": "pkg:npm/%40fastify/ajv-compiler@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@fastify/ajv-compiler/-/ajv-compiler-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@fastify/ajv-compiler@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@fastify/ajv-compiler/-/ajv-compiler-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-uri",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75b3bffa7cba957e2db7ba6f7cf3138877d0551e628182856b9049d9adb54d6b8e81ddb24a9e4362cc2c106b8c70964b2f7fde27f31027928d717c8d52f0edf3"
        }
      ],
      "purl": "pkg:npm/fast-uri@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-uri@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-uri/-/fast-uri-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@fastify",
      "name": "error",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74f4724f8d06887473482965dff267da73dedb9f84d555dcf6d0f044020ac050b1779369e70ce0cf5b66a28586dec574a8a82b0626e2855a029dadabbb848416"
        }
      ],
      "purl": "pkg:npm/%40fastify/error@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@fastify/error/-/error-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@fastify/error@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@fastify/error/-/error-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@fastify",
      "name": "fast-json-stringify-compiler",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f690a2e9cead986b7fa9fb9fda4a1942e4881ba7243fdab79b3f89a0c980abd790e04b40f76b16a0aec4d0b2549f61454d2fe1a7991a83ee3e756b15e597dc5e"
        }
      ],
      "purl": "pkg:npm/%40fastify/fast-json-stringify-compiler@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@fastify/fast-json-stringify-compiler/-/fast-json-stringify-compiler-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@fastify/fast-json-stringify-compiler@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@fastify/fast-json-stringify-compiler/-/fast-json-stringify-compiler-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stringify",
      "version": "5.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3465c4ec8e9d05c493335a69adc2c4210ea71e9e36e260e7f0006578cd7b4a9ed79323cb95b20379de35fd58548aa9cb2025fb5e23a816c347c7f9e727caa18a"
        }
      ],
      "purl": "pkg:npm/fast-json-stringify@5.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-json-stringify/-/fast-json-stringify-5.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stringify@5.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-json-stringify/-/fast-json-stringify-5.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deepmerge",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "149dd4808e20225f8f1d99b9de49ecb9216913e9c448cafb338bfd41c801ed2eb72a3ffa5aa322150269041633d4fb7eeba6d9a4fdd0ecbc9ed0ea3d30f28476"
        }
      ],
      "purl": "pkg:npm/deepmerge@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deepmerge@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-uri",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8a46d6ba37b056105565ca89d563f57e04c2e016a92d0945744234f6e7d7a400895b56b31a16714bc49e2cfc93e5e2da2ee7a4b50733ee7c8eb46cb7b6f5f1c"
        }
      ],
      "purl": "pkg:npm/fast-uri@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-uri/-/fast-uri-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-uri@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-uri/-/fast-uri-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rfdc",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "576868bddcc56ce8bbeff59a8da48c5e4d8e2e6fb134879074c32e07b89c8fb6e4eb38b617c1860318a07270c5a491db37235c83224388ffbc9cead8e5c646ac"
        }
      ],
      "purl": "pkg:npm/rfdc@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rfdc/-/rfdc-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rfdc@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rfdc/-/rfdc-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abstract-logging",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d818d14d9c533ef85e3af19b06c94549839492bf928cfb4e9eb2cfdf77fe54858bcdecd0a5972a560ee36b72f87415e6cf38304fe6b4dbd8d1c793c28b726e88"
        }
      ],
      "purl": "pkg:npm/abstract-logging@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abstract-logging/-/abstract-logging-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abstract-logging@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abstract-logging/-/abstract-logging-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "avvio",
      "version": "8.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b65f530b4c8344accfea014b92b227a8fcb1f0091f042ff44119f0904f49a37d7e3898cbac4ffbdc626e134420481d15a6fdfc093249646a94f61733a307255b"
        }
      ],
      "purl": "pkg:npm/avvio@8.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/avvio/-/avvio-8.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/avvio@8.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/avvio/-/avvio-8.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e0fbd4700a0ff4a77dad78a74630f4cf9d55ca0f4c370df1e71537e2728cec020b2fab65de9cf26afcc629cf343fbfcceb3b2267e83b37f550382480f015fab"
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-my-way",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3475688583d8457823ea3c57551c26e223108c0da0809a727b01f3ecdabb86f0671e8609248c87bb1373b3c40b3d32d07e8ab167396cda0e999bbf5731b8578c"
        }
      ],
      "purl": "pkg:npm/find-my-way@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-my-way/-/find-my-way-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-my-way@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-my-way/-/find-my-way-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-regex2",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3da51216c51a34db8ac240628e800f1c02bafde33a562aefc8f5a567b040432e03fa10af87807a9481be9cf7616c57c86cffa04c605caddb0e694b3417e64139"
        }
      ],
      "purl": "pkg:npm/safe-regex2@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-regex2/-/safe-regex2-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex2@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-regex2/-/safe-regex2-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ret",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3346f761642ced1dd9f75ed6450cb51c703b05aec3f21bd983a504e662f2909c50544da3bb42176c695a1cf3e5918f9637bc053fec14317981140d1a57abd819"
        }
      ],
      "purl": "pkg:npm/ret@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ret/-/ret-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ret@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ret/-/ret-0.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "light-my-request",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0e3c7295fae1e004e9d1a24ccbd4ba9e3029d2028e65feb652ee4c81e86d48f2ac460af857a6ad4ce962b9eb963d0390929f9d25dc355a1e727914276982e65"
        }
      ],
      "purl": "pkg:npm/light-my-request@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/light-my-request/-/light-my-request-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/light-my-request@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/light-my-request/-/light-my-request-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619dc65329ffa3c81f289967957ee0ef1ab88323ba392ba118f29a686b2c181daa803512d203e0b53be8c992d3b7d01be9d0b885f73d755e5aae4bdcfce0a6af"
        }
      ],
      "purl": "pkg:npm/cookie@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-warning",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76ee307cbca3e32099ab556ea6755266646c3c9b0dbb1a034057421472da62211b1410fb404d1af88e03ee13b1ad59e1efc404fd88a91408fd9571e25e8715f9"
        }
      ],
      "purl": "pkg:npm/process-warning@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-warning/-/process-warning-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-warning@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-warning/-/process-warning-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pino",
      "version": "8.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e778e5c6cfb4d94353b45d57c1559f6b47478a906233918aef75e19079fc33685497dcb72fde1d37007c070421a5de567478c19322623bbbf42d1b7848682c3e"
        }
      ],
      "purl": "pkg:npm/pino@8.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pino/-/pino-8.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pino@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pino/-/pino-8.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/pino"
        },
        {
          "name": "cdx:npm:bin",
          "value": "pino"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/pino"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/pino"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/pino"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "atomic-sleep",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90d3a30ea021ee9c745d6348fb841bce8891fe74e41c058db9ddaebe726ab83d7fc796bb11064c253d00733a8ad109faee863f4d34352db50a6a3669a7723db5"
        }
      ],
      "purl": "pkg:npm/atomic-sleep@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/atomic-sleep/-/atomic-sleep-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/atomic-sleep@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/atomic-sleep/-/atomic-sleep-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-redact",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1d5668c2f31f2335e319dc2fab3cc112cd7552114f2d496487bfd1c5c4fda69bcf46ff55b0aa1adeac90d09bd66eb3c5fa6a84604034e12aaa6d74d03a6edf8"
        }
      ],
      "purl": "pkg:npm/fast-redact@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-redact/-/fast-redact-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-redact@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-redact/-/fast-redact-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-exit-leak-free",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56e09a65902345e677bd4c20381f0bc40a2c22eac38805b4b35deb23563099a3fefa3bdcc4fefb016a10bde9d979ba420369bc582d7f128b0f60f3239d1029ff"
        }
      ],
      "purl": "pkg:npm/on-exit-leak-free@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-exit-leak-free/-/on-exit-leak-free-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-exit-leak-free@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-exit-leak-free/-/on-exit-leak-free-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pino-abstract-transport",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73bbe8e4ea56e30212e3685455c4f9444b0bf19963b147c18ea57f7b6b05c661441598aad572d4a791182edb831fa3c41eaf56d5e816a916e72d43f916e66638"
        }
      ],
      "purl": "pkg:npm/pino-abstract-transport@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pino-abstract-transport/-/pino-abstract-transport-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pino-abstract-transport@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pino-abstract-transport/-/pino-abstract-transport-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31fee295604fe80577b45dcc8ed06b1cc1f7ae8b28ef022ba60cc2c2df726efaa225055620404c9e9fd6f92fffcaf612b14522d9c248c03eeaee6e7b97402a67"
        }
      ],
      "purl": "pkg:npm/readable-stream@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split2",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "541889c459318974655087b23108bcb38860bca0928ed92726ffcb5586eb8002cfc1fe7348a984c15f4bb2ddb9024bcc0e7bf1383ba08dd97a29983028cd5661"
        }
      ],
      "purl": "pkg:npm/split2@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split2/-/split2-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split2@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split2/-/split2-4.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pino-std-serializers",
      "version": "5.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55d5170b0f203bec618abeec16ea184a34e7cc1f933031b18400bfa61dd84b7b1d1e75cd76c2b4c0cb400cd525b5f786927d8a0f110cdb57e78c5dd1c17c82f0"
        }
      ],
      "purl": "pkg:npm/pino-std-serializers@5.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pino-std-serializers/-/pino-std-serializers-5.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pino-std-serializers@5.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pino-std-serializers/-/pino-std-serializers-5.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-warning",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8c9a8017a145fe5531c09709ecd21fa4154585b3fdc5672f99b9c864823c8ebb7a22a0b028d8b0796827ca3e1dbe3fd3b5f22de6e37b5412fdd8aadb52cb45b"
        }
      ],
      "purl": "pkg:npm/process-warning@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-warning/-/process-warning-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-warning@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-warning/-/process-warning-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "quick-format-unescaped",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b580b5435860c91b87825a15fd85ecdb0d79ba73d587ca9fbbfa824df85361a99ac3b7f286e98a6b6c86a5d4a8f3bbd8df6ac87258fee1f59841750cb3d107be"
        }
      ],
      "purl": "pkg:npm/quick-format-unescaped@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/quick-format-unescaped/-/quick-format-unescaped-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/quick-format-unescaped@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/quick-format-unescaped/-/quick-format-unescaped-4.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "real-require",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aff1fd333016b6bbfc6925633c2305a43325e6aeba1aab669919118e91d3b29e330406beb2767289036530e36252610972c9dac34c026ae276196383aff68592"
        }
      ],
      "purl": "pkg:npm/real-require@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/real-require/-/real-require-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/real-require@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/real-require/-/real-require-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-stable-stringify",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9180527d3fadae80fd70303ce550e71d9d6ba470b9d0ed20d5ee969461d50b3fe0f894bef5628b8fe5f0158c91f146eb64df2597d1d4a4300075d639f0c1a2b2"
        }
      ],
      "purl": "pkg:npm/safe-stable-stringify@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-stable-stringify@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-2.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sonic-boom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a790e264e6476c9d993b93000dcce9e6aadf39ddd6e55af6bc7c5f0a97bb1b80333f054ec1e2236df824bbcc12414ba4f98e58ba8f16ec9a917ba5ca98a8acb6"
        }
      ],
      "purl": "pkg:npm/sonic-boom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sonic-boom/-/sonic-boom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sonic-boom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sonic-boom/-/sonic-boom-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thread-stream",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26e6727f3c7cd5ee4c064f2e22bf191fbe9b5f28c442f6d10c491276557524505dabfadb6f2d91bafcc16254c177fc42963c72ea53f1ad32d7cc1f499756cdaf"
        }
      ],
      "purl": "pkg:npm/thread-stream@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thread-stream/-/thread-stream-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thread-stream@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thread-stream/-/thread-stream-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96542c30b4940d43d3e388ddad4fcedfbaa59e27e2b433fe670ae699972848ac8b2afb59c69c95d27dbf6c3fcde2d040019fe024475953b28cadaa0ad7e5d802"
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee446d1fa41b511d24c238049eea10f6e7cb44b9b16844b6f864d03a3713151cdc3680e7301e8f70c9a6e5ccccce039cfdc40f4bd4a36393f36de8c4fd698a3"
        }
      ],
      "purl": "pkg:npm/forwarded@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0a23feb4ef1a31493a07ec68cdd457d26cba14d3e6ed4e2723b1049642587f859ca437c2a998c7fbb98c0f5b747e6a467a47fc35f199574870585e26143cede"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "secure-json-parse",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43967ff7b9db38de6dfcbfec1fa998d8469c7e3546c2b09c4a2e43ddbb513b6199f297f52b550ded9f47e49e7b863554d90cf1af5c4ef8598184ebc493308c9a"
        }
      ],
      "purl": "pkg:npm/secure-json-parse@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/secure-json-parse/-/secure-json-parse-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/secure-json-parse@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/secure-json-parse/-/secure-json-parse-2.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tiny-lru",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0291af67abd5bd335db26b7aefa82bbc2914086c331bd22a5e66b9674ef1260882e4beda9143287f953c1b625323d473fe8bed561241958ea636112fb63cce22"
        }
      ],
      "purl": "pkg:npm/tiny-lru@8.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tiny-lru/-/tiny-lru-8.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tiny-lru@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tiny-lru/-/tiny-lru-8.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf666ca04b951d8cbc648958ab03deff7f42cbe7050f3a787573dac4dbe412ea2eca6bbed896f3d0fc6929aac91d82539afd87593dcedfcdaa63c9788cc5ad87"
        }
      ],
      "purl": "pkg:npm/find-up@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-6.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc95da44c2604550f7f9c519b37327723da6c69b7998fd0498d3acc5149944c95baa3bf1cc310e2145971a66afa34642f7eb4d64204b43aeab780d759dba4766"
        }
      ],
      "purl": "pkg:npm/locate-path@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-7.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0faeaeba2e5865effe00182e88f9cab14f4ecb857bd62f4f0b357cf57c434ec34029e2c45967f819a534c9e63a6eaf3cf37d2d96fc67bd058dcb80b8c24a173"
        }
      ],
      "purl": "pkg:npm/p-locate@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5bd11e2dc69ce33d6570fdc5d75117aca03e216fa53fc7d047d3c2fb9f0f86375b1ecc3ccf771791be973d738df77d98416a7ff0bac8db0acab0aa6e0420121"
        }
      ],
      "purl": "pkg:npm/p-limit@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yocto-queue",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5b9d273f1c45b6b91cbaef073e4fc5306ae2ee3c9567dbc8dbf86b49635ea288a5b2be6609457553e146a6b0010641f3e8860af6ab84ead2c41b425c537e2d6"
        }
      ],
      "purl": "pkg:npm/yocto-queue@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46386d7f024ec7370598d3a2ea5b5c6dcbb822ef852f7cc48fcddd9389004be7d5a53c572ced5bdfc46f2604ffd10c2f57f2f7698f53027cafd043aa5b81a831"
        }
      ],
      "purl": "pkg:npm/path-exists@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-versions",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa2c33089ec2e6fe4a81c06eb9ea95a0d887568429c2250ae5714b8dfd1a7df1537a9f96730f77b4fbe66fcb6aba30cd9b38410cf75d9d657faa05925e0abe1e"
        }
      ],
      "purl": "pkg:npm/find-versions@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-versions/-/find-versions-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-versions@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-versions/-/find-versions-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-regex",
      "version": "4.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86e9cc42b132d53e89af6b84563ac022a8f059c41380e01c20ce760bc318d446520f70c335fb74e17cef60a3ea8c40fae5b355564a34608dfc9d87841c25f7cb"
        }
      ],
      "purl": "pkg:npm/semver-regex@4.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver-regex/-/semver-regex-4.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver-regex@4.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver-regex/-/semver-regex-4.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1131249521a2e6dd10319ba25e803f43abdc9f170b40fe6f76e812a6e0328ba4951a2d9c94f3e9fb180486e31a1c2fb31a09f7d4a776df95b7e5fec7ca491ac3"
        }
      ],
      "purl": "pkg:npm/form-data@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "10.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a115c0a6ae78113463e1e3221731a71d61b2fb3a39adab9d8eec4dd1bf07eecfd1536a16d16becc7d3b400244dfe446af44f15bbf45eb24181e68de38be1731d"
        }
      ],
      "purl": "pkg:npm/fs-extra@10.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@10.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "fs-extra"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build.js",
            "line": 2
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-port-please",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35b94f79b0739d80110b5476af5aa6bac6c9000801afde78816844660c137abcd1f2bdee77a5393c8d521b82ee7b8debf3b6a290f3e339bb3ce5589e2032bdf4"
        }
      ],
      "purl": "pkg:npm/get-port-please@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-port-please/-/get-port-please-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-port-please@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-port-please/-/get-port-please-2.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-memo",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6047b1902a4be23d378e7e52c5a307a9c3ba22e5aeaa6f09154621c827a9ec0a3cf49218981f31a0a84aef35d727d70268d5e9c8d1f92f742d026a318e81d6db"
        }
      ],
      "purl": "pkg:npm/fs-memo@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-memo/-/fs-memo-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-memo@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-memo/-/fs-memo-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graphql-request",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dafea1415889bd2b227caeb4e80962aa23628a36f5bb05a9e917bba34453c87fae453bffbbb52a9b6838163abf2e0648cc0441dfc45912f54114e40e55d941a3"
        }
      ],
      "purl": "pkg:npm/graphql-request@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graphql-request/-/graphql-request-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphql-request@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graphql-request/-/graphql-request-4.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-fetch",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96f6f5481b08d19ec60f09ae89dfa6537916541c135546deed2d07e76c9a680750397ab6624b5309976501c34a17313a42d473d2c9e9c3d6cd88f78e224910bf"
        }
      ],
      "purl": "pkg:npm/cross-fetch@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-fetch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extract-files",
      "version": "9.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0af7457c7902f790786c1064dfa85c126bdd4766b039d861554607e92ff3ad58f7e3bef3bde9ff7c931883bd76d61e13d711d90beb5eb54a6e6e9021c7023b85"
        }
      ],
      "purl": "pkg:npm/extract-files@9.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extract-files/-/extract-files-9.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extract-files@9.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extract-files/-/extract-files-9.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4479012ad2d6515c1ded2a9122f099304bc0328194a745d4fac7908997a38f408ecf7448de158fe2c0afde065658b8c94ddeeb1b072c17978a6468a2d2bfe16e"
        }
      ],
      "purl": "pkg:npm/form-data@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "haikunator",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f314d0c36ca89954161b598b24a0fb46bc1737c3e481160a0d284e061b65bb632a3936e87383b97556213e02e281c28c02dc09d0666dcb9378e046cb19937714"
        }
      ],
      "purl": "pkg:npm/haikunator@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/haikunator/-/haikunator-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/haikunator@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/haikunator/-/haikunator-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "random-seed",
      "version": "0.3.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "907b026c8447357268e843795bc100e5be22d61753ea369991ee5cac13cb51c2ea68b759d1006af1054c6da7c7ce18c517cdc297daa579ed9d0a10f5f1dfe43e"
        }
      ],
      "purl": "pkg:npm/%40types/random-seed@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/random-seed/-/random-seed-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/random-seed@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/random-seed/-/random-seed-0.3.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/random-seed"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.defaults",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa3c4f2c7777af90e7b1d19a72a38c53aa5bfdabc9cdd87db455f6ca6828644dbb0668d7acdcbfcb82e86a24de01bf8ede02fc01fa491ada9f5ff69eda579861"
        }
      ],
      "purl": "pkg:npm/lodash.defaults@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "random-seed",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb5df1b67de471394bb9bdc72965f124d782daa2b8981e7d7afc19e4491e465a25c7e069db3b45ecb6dc666c829ceaa51d0acb9dfb8d6e2d6c5669bd94f0e50c"
        }
      ],
      "purl": "pkg:npm/random-seed@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/random-seed/-/random-seed-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/random-seed@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/random-seed/-/random-seed-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "8.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e7e05d3577153c55e29fab5f762232ecc6ed3f3a6319e0b837c4a027b35e3cac26973fa9ed0281245586538568f038df00973759662ea8aa784d6f1506f6156"
        }
      ],
      "purl": "pkg:npm/inquirer@8.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-8.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@8.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-8.2.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-cursor",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23fcc7030b0a7fd16a1a85cce16591002a1bf7e48dba465377de03585e7b138b68a2e46e95b0b171487a44a5043909584c7267ce43ccc92bcf35a6922cd7cb67"
        }
      ],
      "purl": "pkg:npm/cli-cursor@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "restore-cursor",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97eb1279fcc7a63e6a8a6845484e5af27b9f65800cdec05254c00fb589260bee041f66a7486684317483d22cd141bbbd9dfc90f72e49ad59a9ec4f2866b523bc"
        }
      ],
      "purl": "pkg:npm/restore-cursor@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-width",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "171aa990f3f0bb51e3b8df773a67e6e21f2e21a9d7a1f5b44715445b793944ac7e9892584ad873361a77d8acf1c72dd800467f0dcfc458dd6f651634fa43a16f"
        }
      ],
      "purl": "pkg:npm/cli-width@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-width/-/cli-width-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "external-editor",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84c438097d69d62ce6b8b63266a2cc3bfa86370d74c12bfd40308f7f35dfc85ace682492a117ea13529fd6ce5a9fae89e49642eb635ec06fa62b8f63382b507b"
        }
      ],
      "purl": "pkg:npm/external-editor@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/external-editor/-/external-editor-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/external-editor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/external-editor/-/external-editor-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chardet",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "993f220dcae1d37a83191466a00da1981267c69965311fb4ff4aa5ce3a99112e8d762583719902340938acf159f50f39af6eee9e488d360f193a2c195c11f070"
        }
      ],
      "purl": "pkg:npm/chardet@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chardet/-/chardet-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chardet@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chardet/-/chardet-0.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d10899688ca9d9dda75db533a3748aa846e3c4281bcd5dc198ab33bacd6657f0a7ca1299c66398df820250dc48cabaef03e1b251af4cbe7182459986c89971b"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f6151d37562afb148bb8e57058db49936fefd9496074d2c8d4f637505edf37803ac8e19b73e45b3bff2cbbe20d8de52550638c58d6a0ebe2b35d770611557d2"
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-tmpdir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9a76e40544a2d760e1a0127e8065abbdd23de08123b28aa5d4d05f4965f79762135af899385feb38e40db38398e7b3cec60056b7e01066da45f0e17a4d71b76"
        }
      ],
      "purl": "pkg:npm/figures@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/figures/-/figures-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figures@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/figures/-/figures-3.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e76d658e9285b252c4e32ab8600f475ccf6da67644a7a58a9b123226da787086ec654a4a72c09981a3c87466a25d929ef799bf744acb0790de2bb1168101f00"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ora",
      "version": "5.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5be98f39b4fc5967b432b4ef81433cac5b7d47264bb6edc4489646c05da371f8175c562f8b951166557cde17a6bb242c09a72c397386fe61254899022b069b9"
        }
      ],
      "purl": "pkg:npm/ora@5.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ora/-/ora-5.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ora@5.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ora/-/ora-5.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d56d3b70cf604ba0dc2e97ab65f1528fe6d62ed68f1923875a13e21b35e6bd525b44b746f36b07fca9fc12d5b556a595039e0029fda1e64e416e721bc05de1eb"
        }
      ],
      "purl": "pkg:npm/bl@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bl/-/bl-4.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10773220f050e0148696f8c1d7a9392a0009dbb088b0763fd8906609145ea38f32f6b43731a533597dca56505ae14eccc97d361dd563d0aec2dd6681de3bbb15"
        }
      ],
      "purl": "pkg:npm/buffer@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "055887cbb2ca793cf8a0d9e470b27e95548beafa6215e5fafddde8487f33096ed4c4fda89dc864faf4c6075e37c6e1631d2ddd7938242a85d7ca65eaca688874"
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-spinners",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7fe5f5a618c9db29001a37037e519955efda812ccf4916726e274de0222e7086ba1bd31574a1f3551f2f4387019db0c25073638abf4a0698bcef6aabc056ffa"
        }
      ],
      "purl": "pkg:npm/cli-spinners@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-spinners/-/cli-spinners-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-spinners@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-spinners/-/cli-spinners-2.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-interactive",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d87bc810a468a92eb682e102faa063a6f46e6dd5fdd7458232e25367e23dcafa8a536ff5d9e48be78f47330b5a6dbe28ba9763dac30fe7493e5c97c1ffc244eb"
        }
      ],
      "purl": "pkg:npm/is-interactive@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-interactive/-/is-interactive-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-interactive@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-interactive/-/is-interactive-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-unicode-supported",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "927c46daae140b7bbcb2d446c8054908e771166bf90d989171d94868041701b49f2726be3a1a29368b4b42bb2d061aaeaaee19a6e29b0dcffc4ba9a05e03c53f"
        }
      ],
      "purl": "pkg:npm/is-unicode-supported@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-unicode-supported@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-unicode-supported/-/is-unicode-supported-0.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f173efa4003cbb285fb5ebbca48bd0c69259ed2618769522bd9a46cbab05b01b8a458ffbad019abde75e07c68af99932ababa930554bffd016eaf398cdf4722e"
        }
      ],
      "purl": "pkg:npm/log-symbols@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-symbols/-/log-symbols-4.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wcwidth",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c73c4c12d2ae936b172f1bce7ef046246e20aec765ed586da691ce3b360d80efb050bbdf83a8838995d493e0780f92e79aeddbca4a3e55817dcfd5de2b5bc4e"
        }
      ],
      "purl": "pkg:npm/wcwidth@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wcwidth/-/wcwidth-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wcwidth@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wcwidth/-/wcwidth-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defaults",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3cda2b473a762b37421bf2bfb3ee5690cf7b1d13ee053f777d43b54b3bb53e2914fe091d06b16bb21f1cdd018f3623b717bf41bfb70aeaa264c92ceb2c3b91c"
        }
      ],
      "purl": "pkg:npm/defaults@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defaults@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defaults/-/defaults-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2501d9d90316ea5dda1ff8fac42a904e163ff4e1f80fff65b37e1c8245018847a87114d4d38b477ca3c1b142b53ea64251033b1a20342085c94ae5c723ae0a6e"
        }
      ],
      "purl": "pkg:npm/clone@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-async",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6f56756fd356fc73546b03a129ec9912b63f391aebff62b31cc2a6109f08ec012d9c4e698f181063023a425bb46b4a874d4a8136fea83d3b86dc78dbd4b8381"
        }
      ],
      "purl": "pkg:npm/run-async@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-async/-/run-async-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-async@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-async/-/run-async-2.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rxjs",
      "version": "7.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b32f87d294287cef795439852f3c9ac3dc4d254e0a4d14b040818cebe886dd2ca902d0a22c3ce9786f2c26b3425a7d94a7d926f8a864bd375b92b772fb2cd977"
        }
      ],
      "purl": "pkg:npm/rxjs@7.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rxjs/-/rxjs-7.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rxjs@7.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rxjs/-/rxjs-7.5.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3cf6a83b3c8f3001dbd7eb46cc0cff9b1680f90ef866f682e1785a793b86b6405d1c4811ac057e2a66669d3ccbd5aa52c9041722f96a8618e00fbdc0de35256"
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-interactive",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8fd6fa3341123e04c38f723173ae35ee42f75a936a47354319a1e1b67916e24aacaf6c47ffc10b44393397d60ba4e84deddfa4646aa892b7c03fe981253712d"
        }
      ],
      "purl": "pkg:npm/is-interactive@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-interactive/-/is-interactive-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-interactive@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-interactive/-/is-interactive-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c29c59b3d368c596891122462194f20c4698a65d0529203e141f5a262c9e98a84cc24c5083ade1e13d4a2605061e94ea3c33517269982ee82b46326506d5af44"
        }
      ],
      "purl": "pkg:npm/js-yaml@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/@shopify/cli-kit/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/@shopify/cli-kit/node_modules/.bin/js-yaml"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/@shopify/cli-kit/node_modules/.bin/js-yaml"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/@shopify/cli-kit/node_modules/.bin/js-yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3ef56a9e6db173a57f4e47e59ae8edbd6ac22881e44ccdc1ad00835da4c1c7c80835d1fd3969215505b704a867ff3d7c35123019faadbf6c4060dc3beeacadd"
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "keytar",
      "version": "7.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54f0fc9ad56d9b924db40d8012b97a0a1a74e8905fcbb762150ed341085da563a5e8cac2441f9e45bbc0654b1b1904bd92232ad1ca09b32d16d2f1e90c2916b1"
        }
      ],
      "purl": "pkg:npm/keytar@7.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/keytar/-/keytar-7.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keytar@7.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/keytar/-/keytar-7.9.0.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-addon-api",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef7b04f7edd468b6181660ec1599ea0889f33f287732a23064ef5cc39f3222a01984e36bada6eb63261edd3b88aad2223ae4d7561b066aef2172b861c12b0321"
        }
      ],
      "purl": "pkg:npm/node-addon-api@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-addon-api@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-4.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prebuild-install",
      "version": "7.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c05ec71758c7022bc1a00a81ce7c8af43838796a2f268fadcbda75ab8ee0205c4ead0f26069f1e3ff28feb0a053e078252c9904a6de66ace1b70b42de8bf18f"
        }
      ],
      "purl": "pkg:npm/prebuild-install@7.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prebuild-install@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prebuild-install/-/prebuild-install-7.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/prebuild-install"
        },
        {
          "name": "cdx:npm:bin",
          "value": "prebuild-install"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/prebuild-install"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/prebuild-install"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/prebuild-install"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-libc",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3adefdd9788adc5ad760220eaf23a5d49dc82ebebd939c69784b30d78a792df6648ba4124a5d3de65bac53dd541d0cdd75f9656cdbda60be2bd37382e9f2ffb"
        }
      ],
      "purl": "pkg:npm/detect-libc@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-template",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d87ee28cbe3e0edf97ffa4e5cb39b9dd211bf243effee8084e0e1f8e2968fd4bde3df291c79ff20cb331fe82dd1f04245630d7e4d594a9e71dc089f9a7236be"
        }
      ],
      "purl": "pkg:npm/expand-template@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-template@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-template/-/expand-template-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "github-from-package",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b21f2dd3d6fd8d5179f6f4eb1677198ae91c070febe48f7bfc7a7f00381675c0143f842010e5b0104c3d36916e16f6d529ff7421e89f2bf44be7b62c8298e3b"
        }
      ],
      "purl": "pkg:npm/github-from-package@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/github-from-package@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/github-from-package/-/github-from-package-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26c8e79386f0dd826a6336ddc8188db0f5873df3bef94186ef8f42c6cea9782bb95e0e27ade9dae8e571398c6b413ab0c34266c2df9179ff2b820ba69132f3f5"
        }
      ],
      "purl": "pkg:npm/minimist@1.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp-classic",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80a2dc444321b6e651c1101fa8fdd1156f932b826a029541b4e21fb55823b8006902da7184f19a0dc7ef6e136f0f407c883d6852bfedc57df936371a63a36cfc"
        }
      ],
      "purl": "pkg:npm/mkdirp-classic@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp-classic@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp-classic/-/mkdirp-classic-0.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "napi-build-utils",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38d99152a2bbce3ec3597d03f400ded37c1bc0e059c4d01f176d0f9467c2590703dfefcc6a44a1207accab1f58c0f4dfc43745d732de2fe44666247d90630b76"
        }
      ],
      "purl": "pkg:npm/napi-build-utils@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/napi-build-utils@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/napi-build-utils/-/napi-build-utils-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-abi",
      "version": "3.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb8b80b3fe19ce6a7f8e3b03f5cc856035de2127d459a0155ac84f98364e14ebf85e5e126f34d79b9dc8d380b6b91b9e609fb4b793c4b4b1ffa306e7d8da5fff"
        }
      ],
      "purl": "pkg:npm/node-abi@3.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-abi/-/node-abi-3.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-abi@3.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-abi/-/node-abi-3.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb76c682a2a3dd005dc4b6cb9289a5a2192fb00f207408944254812670617e7f813f18386dceb677c4dc056d79c1abc37e07b10a071c72485c66fcb0c9060f3b"
        }
      ],
      "purl": "pkg:npm/rc@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/rc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/rc"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/rc"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/rc"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ce1f120e68f61d1e5251b4241f0c8559b5fc3fb9f33cfab563eb8f51207cdc9bfbc6c1045716de8e3ea2055ac9b65c432b34812d591eb8b18d4b10a0f6bc038"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "255ff2ba0576bb35b988c4528990320ed41dfa7c6d5278de2edd1a70d770f7c90a2ebbee455c81f34b6c444384ef2bc65606a5859e913570a61079142812b17b"
        }
      ],
      "purl": "pkg:npm/ini@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2007c9dad3b7de715564388e91b387bb4fa34e4e48b91262fb4d476e4ece9bbb711d9d2c9c9ed549e2b7bc920640fb0c7d22e788d98d756df6e0c2dcee13429"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simple-get",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ebbfba795a01f48e6409af56430df2833927965a0f8e572a46f7d03fe6f6063ea27aa7189a1cbcbc9f1b458c103ba0c6b4d5e6c0f607e1d6e30216a3ae5f1bc"
        }
      ],
      "purl": "pkg:npm/simple-get@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-get@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/simple-get/-/simple-get-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-response",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "696df9c9933a05bff8a099599dc307d8b0a866d2574d1c444b5eef137868462a305369161da24a1644810e70d1f9c9bd27ef5085799113221fbf4a638bd7a309"
        }
      ],
      "purl": "pkg:npm/decompress-response@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-response@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-response",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf4c9623ee050ebaf0792f199ade048f91dd266932d79f8bd9ee96827dfe88ae5f5b36fa4f77e1345ab6f8c79345bd3ae1ce96af837fc2fd03cd04e33731cd19"
        }
      ],
      "purl": "pkg:npm/mimic-response@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-response@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simple-concat",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71216d00fb518658efebd20ad214d5650f8e7c4f6778f8bfaed266c395231de57256ba04a895cfd6c173b4a532d6a53ec6fcf7bbfb1f6092daf78edbee700dd9"
        }
      ],
      "purl": "pkg:npm/simple-concat@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-concat@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/simple-concat/-/simple-concat-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-fs",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "574af663db1c99b0d12c235ec7ffa1633be9ff3c988ef15b1cf36055329f42f56b6fa82e884fdfc4ff976e50cd474d75bada296e47b1da7338747355e860ec9e"
        }
      ],
      "purl": "pkg:npm/tar-fs@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-fs@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chownr",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c9d1bab36b296626d567360cd37923acf033dabe96d8804aff6f460bf3fd863b7c4912122716684a3149c42508d9ba62bb297185854cbcf4faec25695a90156"
        }
      ],
      "purl": "pkg:npm/chownr@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chownr@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-stream",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba37aa6dc780060c0c6711099e4d870d8d83967519fbda0471bd4acd355f6078a8d1413a746ef59fad1df03d88e2a36f95e5abad7a668e9b7bbd9785d4b9cc65"
        }
      ],
      "purl": "pkg:npm/tar-stream@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-stream/-/tar-stream-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-constants",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cba380c284887fb1728cc22ff78bbe6f9add85e6448f347adc64f26499b9aa1e018bed988302c2708fdf3c56642f93d28b13ade9934a9bec3e1dfa7f05c8b0a3"
        }
      ],
      "purl": "pkg:npm/fs-constants@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-constants@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "latest-version",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdf4ee1b1e0fc29a1227598006ce7c02433aa8cceee3d2d9ecb4f9247a6b2afa46a50f9c62d7d289b8b7b4b2eb1f8cfb532958538dab7c177037c620a9b4e58c"
        }
      ],
      "purl": "pkg:npm/latest-version@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/latest-version/-/latest-version-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/latest-version@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/latest-version/-/latest-version-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08726a73de0003c61f48b1c6413dc36ef488b84d7634b15e9293389fb2d1ac077774e26d03dd75fb8c5ef6aea70b7fe370aadaabb9cd4bd57182d4f4282f9d88"
        }
      ],
      "purl": "pkg:npm/package-json@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-json/-/package-json-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-json/-/package-json-7.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "11.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3425ee0dbd039b02e64f1cb16845291d1b695382d7329eaca6ce0d95ba9771e8fa2b85a4f93026c8c971ba7780fde2493c646e7b41ea2c81d8aa7c95a112195"
        }
      ],
      "purl": "pkg:npm/got@11.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-11.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@11.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-11.8.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@sindresorhus",
      "name": "is",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b74f6f48ddcc75fb32087a057134421ff894b46ece2740ac8f307c72302629cfef6bf90881e0c8fd3c6c8a0767704ff86deef7e26d1cbc863035a5788b65ea03"
        }
      ],
      "purl": "pkg:npm/%40sindresorhus/is@4.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@sindresorhus/is/-/is-4.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sindresorhus/is@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@sindresorhus/is/-/is-4.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@szmarczak",
      "name": "http-timer",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0101f7f29183a03bee67cc1598c04dd6f74b0180b26850f45659c2fcc25ca233c201f22a49cf750c27d29741dd512905e92a9f13bad9fcd0766d5acbb6bbbeb"
        }
      ],
      "purl": "pkg:npm/%40szmarczak/http-timer@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@szmarczak/http-timer/-/http-timer-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@szmarczak/http-timer@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@szmarczak/http-timer/-/http-timer-4.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defer-to-connect",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2dbedb5ea571b555a606ad189b93913025dd6de2e76e9d239531d2d200bea621dd62c78dfca0fc0f64c00b638d450a28ee90ed4bd2dc0d706b1dcd2edd1e00e"
        }
      ],
      "purl": "pkg:npm/defer-to-connect@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defer-to-connect/-/defer-to-connect-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defer-to-connect@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defer-to-connect/-/defer-to-connect-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "cacheable-request",
      "version": "6.0.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "077c55a3e76528cea79ca4dc9a6e59b58fce2fc6ce00e7763a579ef4cd737edeb9a31e743b38c41d6f75b03894f63e9cbd6f048e0d7f4247f8c5dda4ba002950"
        }
      ],
      "purl": "pkg:npm/%40types/cacheable-request@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/cacheable-request/-/cacheable-request-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/cacheable-request@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/cacheable-request/-/cacheable-request-6.0.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/cacheable-request"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "http-cache-semantics",
      "version": "4.0.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "499b3b7a46cff02374b71546db15511fa1202a6126df504ec40d3bbe415a113cd9cf5c61f9c6edf01708d2c969ca6bf0871e5d9459d01b6ad394f5509fe8913d"
        }
      ],
      "purl": "pkg:npm/%40types/http-cache-semantics@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/http-cache-semantics/-/http-cache-semantics-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/http-cache-semantics@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/http-cache-semantics/-/http-cache-semantics-4.0.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/http-cache-semantics"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "keyv",
      "version": "3.1.4",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "050e5a64d482a63ec3e8ada4b2b4424e62912c4a673ef58388b3dfa06ca167efbc62d88af5dff70c128f260af2df9f57fcfd4f7ebbb2630be7bf0163b8488422"
        }
      ],
      "purl": "pkg:npm/%40types/keyv@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/keyv/-/keyv-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/keyv@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/keyv/-/keyv-3.1.4.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/keyv"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "8.10.66",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b64b4e905500e245f1da1861ac1f1b2056f94dbc334b8b8e84a126c220fe36888bd2ab4fd8e43d98595d6e00f8755d5d8eb94160fe9e06e4198968ee1d4a6a17"
        }
      ],
      "purl": "pkg:npm/%40types/node@8.10.66",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/node/-/node-8.10.66.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@8.10.66",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/node/-/node-8.10.66.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/node"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "responselike",
      "version": "1.0.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f396360638ae7c5cda30896f243bd34c1f05c65db17cba381e0987cd5073d3cc38c0378f0938d8c3ae8f76ba253b4933962df26a6fd80a046e7f2a350dd4154c"
        }
      ],
      "purl": "pkg:npm/%40types/responselike@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/responselike/-/responselike-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/responselike@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/responselike/-/responselike-1.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/responselike"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cacheable-lookup",
      "version": "5.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbf90db1c3e1a5cc6b3a280c6736e2585eddcfc8a585bfe72075371326625d65e97aafdabbca89f1585d7ed324b72de7ec68fa1c819a9501bca2204d07700980"
        }
      ],
      "purl": "pkg:npm/cacheable-lookup@5.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cacheable-lookup/-/cacheable-lookup-5.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacheable-lookup@5.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cacheable-lookup/-/cacheable-lookup-5.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cacheable-request",
      "version": "7.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a68b96f3f16688f41bb86a645d0f4100fbff328e710c600d812357cd3cc9f03aca1ae5ceb2c338c084118df6a735187762ee5c7d83ef728aea6e183628826d7b"
        }
      ],
      "purl": "pkg:npm/cacheable-request@7.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cacheable-request/-/cacheable-request-7.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacheable-request@7.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cacheable-request/-/cacheable-request-7.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-response",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca32d787cf0fe7df543b23d3157d0f3ac77b5b19dbb15b06a21730cc738bb292218696a53f0d4172a103f0d6e5c992ca706acbf1d4e032571a6715768c00f8d5"
        }
      ],
      "purl": "pkg:npm/clone-response@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-response/-/clone-response-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-response@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-response/-/clone-response-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-response",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f911cb67907eda99f57fab91e09a86a5d60d901c5251ada3ad9b1d09a48aa4c6106123f9494a5d67329438e6155aaf03444cea161229a7759e102b4447c6ec5"
        }
      ],
      "purl": "pkg:npm/mimic-response@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-response/-/mimic-response-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-response@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-response/-/mimic-response-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c117e175ac06550aefe9eeb8f3800f986f895f617ae997b6ba56626b53cc05f48d422af3ff4303cd6479ce9706d3918e9dbed148cc5312c905db2e84d03d1a4"
        }
      ],
      "purl": "pkg:npm/get-stream@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-5.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-cache-semantics",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71aacf92571487b44e5912bb0afdbb44fb5d858854b1e95afee7b9fe32b38de815bd70ea33620b13d4360469fd259261d60f3b729e7ab2efc58104b37164bc71"
        }
      ],
      "purl": "pkg:npm/http-cache-semantics@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-cache-semantics@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "keyv",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "927f169a875505ed769661e903a5bc398ed2361eb0551f99fb0644485e221791426b36955c658eb676e7bd7d2d310d5b3befd398e0fd2f38ae60cbeb208b34c7"
        }
      ],
      "purl": "pkg:npm/keyv@4.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/keyv/-/keyv-4.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keyv@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/keyv/-/keyv-4.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compress-brotli",
      "version": "1.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "955710b238718485ecbaea5fcbd7e665416d00874199703b10663a18176067efaa90cf731b86054fc894ec5a01c73af234330ea43d472051d4497e03f3ba2a85"
        }
      ],
      "purl": "pkg:npm/compress-brotli@1.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compress-brotli/-/compress-brotli-1.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compress-brotli@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compress-brotli/-/compress-brotli-1.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "json-buffer",
      "version": "3.0.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd83fcd08c711490786f9b580b64943f0920d1740b8aed275af8518046ad8237fedbd21c58ef57d64f3146fe431acb09fe50ab8d84e340f7286c9af6c96215b9"
        }
      ],
      "purl": "pkg:npm/%40types/json-buffer@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/json-buffer/-/json-buffer-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json-buffer@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/json-buffer/-/json-buffer-3.0.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/json-buffer"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-buffer",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1b57905f4769aa7d04c99be579b4f3dd7fe669ba1888bd3b8007983c91cad7399a534ff430c15456072c17d68cebea512e3dd6c7c70689966f46ea6236b1f49"
        }
      ],
      "purl": "pkg:npm/json-buffer@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-buffer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lowercase-keys",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6a357ad2efca0c384ef734cc4ae0430b42c428c167fc8caa281fd83bc4f6af453ef4e91e9b91027a0d8d937bb42e91a66cba5c5adf4c10edb934a66e1788798"
        }
      ],
      "purl": "pkg:npm/lowercase-keys@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-url",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e52fe5f03b2dcdc4043cc6e0b4a243e02b8ea2b953402b4d5837b46e79806aa85786b018d5f5798203301d82dfbaebb6c297990f87d12a28a0f09da3c6d48ec"
        }
      ],
      "purl": "pkg:npm/normalize-url@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-url/-/normalize-url-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-url@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-url/-/normalize-url-6.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "responselike",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c47e3cbb715307d56c670ed1fafbe068a78b2b34fa8cea206d08447bf8dec309d98333dc9f25ae8b602fe89a6861917ff75bae782fa5aa15aa794470e7faa10b"
        }
      ],
      "purl": "pkg:npm/responselike@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/responselike/-/responselike-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/responselike@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/responselike/-/responselike-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http2-wrapper",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57edb7b0332bd765a7cfb893703789af73ba008c659ef4ff6e66800003ff5dd6b7e42f74a7de7df69d05d5e1d1fcdd4a20b592a1654088e3058c105769748cc6"
        }
      ],
      "purl": "pkg:npm/http2-wrapper@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http2-wrapper/-/http2-wrapper-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http2-wrapper@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http2-wrapper/-/http2-wrapper-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "quick-lru",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5aec802d18d63c31adb7fc3326269d3b901763ef2167cd215697ba3328af82b691116ef9d57dd26e146f1b778b28e60dfbc544bea2dc7f7c1d9ede386784b848"
        }
      ],
      "purl": "pkg:npm/quick-lru@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/quick-lru/-/quick-lru-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/quick-lru@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/quick-lru/-/quick-lru-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-alpn",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1ad45e25ef7fd915939a9099d0dc5be4276fa0493416cffaf6284e4e7436344f13e6e61e0692a91659f338ed3ec7b1b9ceb5c255105e1ea42572eaeed0dcafa"
        }
      ],
      "purl": "pkg:npm/resolve-alpn@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-alpn/-/resolve-alpn-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-alpn@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-alpn/-/resolve-alpn-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-cancelable",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0593abde74501ce9ed5234eb1fcf8b879e2c98a1e81f2babf167b557c0d2315ae5e40da66a538ec2e2519ca4438d29e4a1e061e1ab7a0701276f923b265df5c2"
        }
      ],
      "purl": "pkg:npm/p-cancelable@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-cancelable@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-auth-token",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c2e59cac35be36ce914c13a0ff5e5220b4d19d4e5f1b04e0b0f74c502d5329ceebae6c92980d614012e50d73e0a7f19f3bdb8b60d920e10d1ae4544b2a7c332"
        }
      ],
      "purl": "pkg:npm/registry-auth-token@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-auth-token@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-4.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1a7185d74c8d00910bfa4403a3137bce6885d9913f70a382ce15b04a6101049e730d0692aa754ac8e92e0d4f428f228fd656f279b44fd7e4b17f4d051fd1e93"
        }
      ],
      "purl": "pkg:npm/registry-url@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-url/-/registry-url-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-url/-/registry-url-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "liquidjs",
      "version": "9.37.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a838fd8a235d07e40d65347888a8e2433a074266bb57c22dc79a191bf6423fbc6379b8752c8face481b665851bb3500b3ba841ce65b7e8fb5df114787a886e0c"
        }
      ],
      "purl": "pkg:npm/liquidjs@9.37.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/liquidjs/-/liquidjs-9.37.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/liquidjs@9.37.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/liquidjs/-/liquidjs-9.37.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/liquid, /app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/liquidjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "liquid, liquidjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/liquid, /app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/liquidjs"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/liquid, /app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/liquidjs"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/liquid, /app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/liquidjs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "listr2",
      "version": "4.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ee18757576841da4d4f71924ecf4850de374096fb287745f6eaa0ed5b9fb3fb46f554f3a45a61a85e299bf202740001190c6cc8d9fd0a2600dd2b6423a8e9c0"
        }
      ],
      "purl": "pkg:npm/listr2@4.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/listr2/-/listr2-4.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/listr2@4.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/listr2/-/listr2-4.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-truncate",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fc7ce8b1c030fa6ff39b8a7cd3ae9d59285cdb82f299beecff4ef7a39cb9f56907c2eabe765c4c7ce459ae0bedc723e24cedca0145752f36a114d8f1d5ac7a6"
        }
      ],
      "purl": "pkg:npm/cli-truncate@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-truncate/-/cli-truncate-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-truncate@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-truncate/-/cli-truncate-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a52cafedb4930bb8a0f437206f0f40b913546f993957aa03b9d8d9a0c052af5deaa4b046eed07ece00a40118eaef121481dcf93f541ef2efab486768b8e388c9"
        }
      ],
      "purl": "pkg:npm/slice-ansi@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "astral-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67bb4cc35cad4d7b798ea31c38ff8e42d794d55b8d2bd634daeb89b4a4354afebd8d740a2a0e5c89b2f0189a30f32cd93fe780735f0498b18f6a5d1ba77eabbd"
        }
      ],
      "purl": "pkg:npm/astral-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/astral-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/astral-regex/-/astral-regex-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colorette",
      "version": "2.0.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ded96ffdd20fec55af8f706c6c7ac62c9ea5fe82a1d4edd372006a327fb2c826a03b1736ddfcb30d2e87ca941b83159b9290e77f9da9d4bb91e1e58343f2bd59"
        }
      ],
      "purl": "pkg:npm/colorette@2.0.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colorette/-/colorette-2.0.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colorette@2.0.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colorette/-/colorette-2.0.19.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-update",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5f9240debcc79f8e0d269b3585056f189053fdd4eae2cf3916ddd885ec2a46f92d8461dcb8f9355f1b0cf5cde17cc7b842c75a2f48f4ce13d36089bef8aaa52"
        }
      ],
      "purl": "pkg:npm/log-update@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-update/-/log-update-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-update@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-update/-/log-update-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8c08c7e1634e347151d3e372bd045ca0a986d43c564a1ce83b2bbde6b5358945bf29c8fddfcdfe08c5de52cdd10943a311520fd606738bc60859b4a2aeac435"
        }
      ],
      "purl": "pkg:npm/slice-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afa94f7011b1657948732984bbb227c43321756d0a0f1a4b82814b720b9ab3109a27f48e219c0835ab4af4a63fb5ff99ae5cb038a5345038f70135d405fc495c"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "md5-file",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5b1055c26155ab4b1fe010a4b554f960f3887fe0bdb4ce7548ba52b0ea431f98150064d027174d1e733cfd202325fbf863406a392925d1c5b2ffe3b5f7ae633"
        }
      ],
      "purl": "pkg:npm/md5-file@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/md5-file/-/md5-file-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/md5-file@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/md5-file/-/md5-file-5.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/md5-file"
        },
        {
          "name": "cdx:npm:bin",
          "value": "md5-file"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/md5-file"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/md5-file"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/md5-file"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "3.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c0cbf1d99cb0033959153ee6dac470dfb76f5ba281a094f143af61f0d09d407ab711874d54895166fbe28c0e725e1fdb0780d07886c5cf8a2ed28329bfb136f"
        }
      ],
      "purl": "pkg:npm/node-fetch@3.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-3.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-3.2.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "data-uri-to-buffer",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56bde62c103ca9699cbac72148b00ea202a043f270c6e96fdd1344e055e7616446ba3ceb456408e26d767d0a919305f4e82d0a6a784baf884af86c9d72166c68"
        }
      ],
      "purl": "pkg:npm/data-uri-to-buffer@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-uri-to-buffer@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fetch-blob",
      "version": "3.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37ae19a4aaa82de8e5af09080276fd88b480dd5c7f923833a5c0e1ca072a27628a8e4cbc9c281443e7735ed6eb2da59919936635f413b22434c1e675b2f8251e"
        }
      ],
      "purl": "pkg:npm/fetch-blob@3.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fetch-blob/-/fetch-blob-3.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fetch-blob@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fetch-blob/-/fetch-blob-3.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-domexception",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe3299a0ca70d05f06470978fde2d138f03771f717b4b0293f44332e6513fc7b8f0995b207b218f59acc78ac363bf9c522a3d00773d533d6989b4177d760170d"
        }
      ],
      "purl": "pkg:npm/node-domexception@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-domexception/-/node-domexception-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-domexception@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-domexception/-/node-domexception-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "formdata-polyfill",
      "version": "4.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee7b01f332f60bdbd8dd7904d520b79c49a64a9edfd12568e8642179396eb467aeff1a648b06438533baa1d4f237cc536d25b6992f9790bb5bcb7daccec23e2"
        }
      ],
      "purl": "pkg:npm/formdata-polyfill@4.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/formdata-polyfill@4.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/formdata-polyfill/-/formdata-polyfill-4.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "open",
      "version": "8.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e014f3ccf81dbc16d0828126fd23eb3db33382d6f6514b0816b11500e72948c514e02a8cea8ce0ab54ea86b180013d82b9aa77ea0a5c594c505af0f2addafe9"
        }
      ],
      "purl": "pkg:npm/open@8.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/open/-/open-8.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/open@8.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/open/-/open-8.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-lazy-prop",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ecd3da8d87ccb0de48528e22638942276865fdc65a990d8ec956bc86c5dc55ecd3debaa41fa653a943aeb224566eb778cb6b9ccec245f0d60f44236b8a8783a"
        }
      ],
      "purl": "pkg:npm/define-lazy-prop@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-lazy-prop@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-lazy-prop/-/define-lazy-prop-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pathe",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b138ad4cf6279f6ddeb05477465a980569f8738e5619e2dcb0acd0894a57240c9f71692896f958a55f052e8ec98ac84af78ea84303055021d743d02318f284c7"
        }
      ],
      "purl": "pkg:npm/pathe@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pathe/-/pathe-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pathe@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pathe/-/pathe-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba3a693be32474faa854836e0c50d12c2966ec3efca9b0edd3f351fb0a7916a1193a84cd0233c75a3d7b41186eee07881c97dc361464d57550985f01a77c9efa"
        }
      ],
      "purl": "pkg:npm/prettier@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettier/-/prettier-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettier/-/prettier-2.7.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/prettier"
        },
        {
          "name": "cdx:npm:bin",
          "value": "prettier"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/prettier"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/prettier"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/prettier"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simple-git",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db0df9c6b4b9ad5b405b483aecbaadc4264de5c75d773ff0a1045f4b43895da9635c4a13c9c859e239c4f82420adaff05f866f1de88285350c7a70b07c860463"
        }
      ],
      "purl": "pkg:npm/simple-git@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/simple-git/-/simple-git-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-git@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/simple-git/-/simple-git-3.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@kwsites",
      "name": "file-exists",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bdff9606475f25230c52143c1f137a00edb5aeabd91d6aeeae80de07dab25eca115065c1bd020487910b520f5e5af16bd381fcfd6a291932b28f1ef6e9a858b"
        }
      ],
      "purl": "pkg:npm/%40kwsites/file-exists@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@kwsites/file-exists/-/file-exists-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@kwsites/file-exists@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@kwsites/file-exists/-/file-exists-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@kwsites",
      "name": "promise-deferred",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19a1d89be7343bd323651bb4a278060516e29eef2054031dd946638e2ea3566a8ab5996e667a6d5c65a1cf513c8fc0f61c9ddfff2331280502d1bfb9ef09dc23"
        }
      ],
      "purl": "pkg:npm/%40kwsites/promise-deferred@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@kwsites/promise-deferred/-/promise-deferred-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@kwsites/promise-deferred@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@kwsites/promise-deferred/-/promise-deferred-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b811d4dcbddccec232617297f3c7ddac6a2fc5d482a13183459e92617b524712d95331e0e4fffae87b7aba85251eef4466877e8a75e12a8dea420c17513ff2d7"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13e5d0091c126da6a20a1b6fea4e83c2073e6f1f81b3abee2891c7979928c7f05a29b8625f3a903b02b870edb6c84946a763829a3c15853dc79b18323c69c97d"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stacktracey",
      "version": "2.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a98a3f6b880f94360ed39e986a8c7eff0b372d43fa3024635b1647c47af7b8678bb14f9f896a954b15772cbab21f377e209d3599349fdfecd306d04f090f34f"
        }
      ],
      "purl": "pkg:npm/stacktracey@2.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stacktracey/-/stacktracey-2.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stacktracey@2.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stacktracey/-/stacktracey-2.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "as-table",
      "version": "1.0.55",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6fb161125099f424de36d576fd310c3a02c3074425249c27b45a3971be3b9df34994e04ea141fd40e8dcd029c60d998c3ad8c7f312d5dcf9b69db2d64fdc9a5"
        }
      ],
      "purl": "pkg:npm/as-table@1.0.55",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/as-table/-/as-table-1.0.55.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/as-table@1.0.55",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/as-table/-/as-table-1.0.55.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "printable-characters",
      "version": "1.0.42",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "74aa7e0b889758ae2f5586666127742811f917f8751e8651b1b27cd8054a44edcf128f0be25052fef2f0855b69c30b9872822c558fb5258291dbaf329f8f34b9"
        }
      ],
      "purl": "pkg:npm/printable-characters@1.0.42",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/printable-characters/-/printable-characters-1.0.42.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/printable-characters@1.0.42",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/printable-characters/-/printable-characters-1.0.42.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-source",
      "version": "2.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f9fb8fa20fe1e849e1040febb0ad0d3b04e42bd2410314c56aaa906e23e45a641a41a470ae5f1a3bd1b8daafa7f46f4bbf0d026c27bb2cbaba4fd15eb4033fb"
        }
      ],
      "purl": "pkg:npm/get-source@2.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-source/-/get-source-2.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-source@2.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-source/-/get-source-2.0.12.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "data-uri-to-buffer",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "343f6a0d32dce9d8b08fe5dee5c7408154db2d57576edc532515d18658bc328c2e69a9fed0424eb5da89d1008735248fca85c6c7d1d7dbf54c9ca782df800284"
        }
      ],
      "purl": "pkg:npm/data-uri-to-buffer@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-uri-to-buffer@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tempy",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9be411799561a5ad18e7a7e67e82c545937868315d777a9577c6bd93745fc93c3fd6eb5560d83e02be0163a978fd39648580822457e1616b7dbb2d35dbb6ee26"
        }
      ],
      "purl": "pkg:npm/tempy@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tempy/-/tempy-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tempy@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tempy/-/tempy-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "temp-dir",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a80409e24269b0b5c2a9ffb073b07f02c73bfc38bef7ea9eefd628466f97bd0c9f644f01961eb42b541e7e95f543cdf1ab751cd7721fa283b2c7698d494ceae"
        }
      ],
      "purl": "pkg:npm/temp-dir@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/temp-dir/-/temp-dir-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/temp-dir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/temp-dir/-/temp-dir-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "2.15.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d84a3708cf7366a1092c5eaff7fc1ecd7da77e4fc9a4688eb6f1a8000271c2a573d305130adb282ddde001a73208f026d964cf1d2dd550e06afca2eb2316333"
        }
      ],
      "purl": "pkg:npm/type-fest@2.15.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-2.15.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@2.15.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-2.15.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-string",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5465c1515c3128c054ce7c9f7d0c1e40004f4515b5bc76406da74566e778a4b140a911afbfff7abda7e08d616ace8babcebf18a2795088f807d180897dac2819"
        }
      ],
      "purl": "pkg:npm/unique-string@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-string/-/unique-string-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-string@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-string/-/unique-string-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-random-string",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7c772dd19ef61d95470f3a39041eaa33862c3328d4aaec670fb9715b9f230e087c57f15dce80883fa58b9a6e5dac6d43df20969e01007b3cc38af0314876844"
        }
      ],
      "purl": "pkg:npm/crypto-random-string@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-random-string@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "type-fest",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c864b36bbe31934506f24fa92e1e687a8622aef2225a8e6dd3fa37cc71c03b6b510e265cc563fb7f2c0d95786a6fafebeac5afc22f91b3240c5a154b7b8055b8"
        }
      ],
      "purl": "pkg:npm/type-fest@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-fest/-/type-fest-1.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "term-size",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61f13c2b08ebba6be20b199e392d6bd61030a9471dfc09e1ac6fcfa25fc6af2f751325024be8d01f4a85519394929190e6b5ec28c2ba4ba9239dee77cad612ff"
        }
      ],
      "purl": "pkg:npm/term-size@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/term-size/-/term-size-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/term-size@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/term-size/-/term-size-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terminal-link",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e514bde6e30ba2c667fa21f84525dd583e22e232ec4473cb8744cd5bbb321e64f9b6d80bb6a43a8125081da3b9f559f3d4d4e3451afed80f0a450661c617a96"
        }
      ],
      "purl": "pkg:npm/terminal-link@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terminal-link/-/terminal-link-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terminal-link@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terminal-link/-/terminal-link-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4614c557f07a84fd307e16e0491ae3b95c6d16aec03aa6d52aa0e0da4ff9fd9a651a64592a9c1b9e07895ea860429ab5079c29c2e0f0994c277413b410f376c"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ts-error",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b4b27169c21050cf36211ec93b551490a958b944e6a18f4704902635617385e4a50d2e523cc70d21ea5e8c725ae01a4f40b01c6d18517f7183273ca3eab6cabc"
        }
      ],
      "purl": "pkg:npm/ts-error@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ts-error/-/ts-error-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ts-error@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ts-error/-/ts-error-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zod",
      "version": "3.17.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2828fe73bc6e8619b325a81908e45112380c1e95d12148e67a2c8e9c1be273513ee87e3d59382d0f26e76940ea53d62a8e169618b57e4fc34fa8e34df2e1b72"
        }
      ],
      "purl": "pkg:npm/zod@3.17.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zod/-/zod-3.17.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zod@3.17.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zod/-/zod-3.17.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "plugin-ngrok",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb5e9defb044da6a06b40f4ae6220f0c9910249ebee491ce14a62eb35af75b5846b41bd562029a55d396916aededf89fc9f28843d4357a69ae067ffd41e3e730"
        }
      ],
      "purl": "pkg:npm/%40shopify/plugin-ngrok@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/plugin-ngrok/-/plugin-ngrok-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/plugin-ngrok@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/plugin-ngrok/-/plugin-ngrok-0.2.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "ngrok",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b3fad83a3dabc9193295395775004c66d4c1f5cd5c84de51d6c2744158847ffae3313e6a1bf64a786d1968e3fdbbd2a59f18b36263de932600725449b843dfe"
        }
      ],
      "purl": "pkg:npm/%40shopify/ngrok@4.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/ngrok/-/ngrok-4.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/ngrok@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/ngrok/-/ngrok-4.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/ngrok"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ngrok"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/ngrok"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/ngrok"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/ngrok"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extract-zip",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "183854f67b70b8ac865dd6415204c87bebd79d68f47e9a5412d3032f4fa275de52b5af131a91ecb27fdebac03d9ab3ebf6a343ca6e92c406198cdbc29fff5106"
        }
      ],
      "purl": "pkg:npm/extract-zip@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extract-zip/-/extract-zip-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extract-zip@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extract-zip/-/extract-zip-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/extract-zip"
        },
        {
          "name": "cdx:npm:bin",
          "value": "extract-zip"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/extract-zip"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/extract-zip"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/extract-zip"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yauzl",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a786bd23a5fa9eee888681a606a01c6c9cb59a50b88f6eef10f657f45e0be3fbd94f72f2ab5564147c3f57f3d4701f41ba8f831b7887913d31dd0c9ae7ccdcde"
        }
      ],
      "purl": "pkg:npm/yauzl@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yauzl@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54ef47b7ffa9dd237b48a5aa72b804ce319b4522584f1f90d694d00b4c2b5aa1f1d2fa49ada43a1ad1f1f2dbdc835ae52b56f2854e6071cc603a08fb0744c391"
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fd-slicer",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "704d6ab01fd5c32428cd9faad5d1b147c2c160d65ea1f84475434648c6d00f71b0da50335fd65bdee214e846dcfc59b28e8f405967e79f4014087aad7afb3ff2"
        }
      ],
      "purl": "pkg:npm/fd-slicer@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fd-slicer@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pend",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1776acbf8d94b97721773b7ec57a9f5b538695505efa6c5ada6a88d29839c801d93ef16663763a76b49ffc643503ce9681610df4ace1fd6ae029aea219c1d72e"
        }
      ],
      "purl": "pkg:npm/pend@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pend@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yauzl",
      "version": "2.10.0",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a7e966029b4b57bfca7a93e03c3ef6c31bbeb7103a41a13cc7740f90fcc17a1f7b1aa468c29bd373a1a2677094bdb54292b82a03b3d5c7c5862c40383147a93"
        }
      ],
      "purl": "pkg:npm/%40types/yauzl@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yauzl@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.0.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/yauzl"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.clonedeep",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f9661085db9ae215df6e0795029152a8eb59b74bfc59935c78c00eb2a7f2f74453fa67f7871f5ca641c18ba3b27718c3df9b457fee6d6daf21ee195c69a8405"
        }
      ],
      "purl": "pkg:npm/lodash.clonedeep@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.clonedeep@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yaml",
      "version": "1.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af7bd7c84ad109827bc20dbccaf058e554a8005f19be5716f7f07053312d52c8ef5ff0cab36e1d224bb08edba9af02491ec6f251b2c0a5ea584d1d41378b87ae"
        }
      ],
      "purl": "pkg:npm/yaml@1.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@1.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hpagent",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78fa855c7b524160055d89a3f89b4e4c7afce2236b208e3f41194000f3c4fb3aa72b2e31268ec87b5638902ec0741f8bc4bc524d3cc13004ac11ccb4abc632bd"
        }
      ],
      "purl": "pkg:npm/hpagent@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hpagent/-/hpagent-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hpagent@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hpagent/-/hpagent-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "cli-hydrogen",
      "version": "3.0.25",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6456ac41b3d8e102147d316c88ded5f0c5b009be5682c2232acee28c09d48aecbc93bfbffcc534751f0271b0b2137b946c884bbe903dea17b1f2f717e4a1c1ab"
        }
      ],
      "purl": "pkg:npm/%40shopify/cli-hydrogen@3.0.25",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/cli-hydrogen/-/cli-hydrogen-3.0.25.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/cli-hydrogen@3.0.25",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/cli-hydrogen/-/cli-hydrogen-3.0.25.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "hydrogen",
      "version": "0.26.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "782dba3c2299c4a8c68cb0c2bec6ad879b979c69aa77f5dc82d37338145904efbf58fa181c5c3bfdf9d38b972aa538241561524d3b717b4d17066e21e1d7156f"
        }
      ],
      "purl": "pkg:npm/%40shopify/hydrogen@0.26.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/hydrogen/-/hydrogen-0.26.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/hydrogen@0.26.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/hydrogen/-/hydrogen-0.26.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "mini-oxygen",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6721563530c1f9316fafafcc19c5eb45b29b09d2c628cba018bbaf29661fe586f51830972b9cc3f3c7225cd9fb20cfa6cc87a9674c85e4f298e777831c90eb53"
        }
      ],
      "purl": "pkg:npm/%40shopify/mini-oxygen@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/mini-oxygen/-/mini-oxygen-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/mini-oxygen@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/mini-oxygen/-/mini-oxygen-0.0.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/oxygen-gen-config, /app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/oxygen-preview"
        },
        {
          "name": "cdx:npm:bin",
          "value": "oxygen-gen-config, oxygen-preview"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/oxygen-gen-config, /app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/oxygen-preview"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/oxygen-gen-config, /app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/oxygen-preview"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/oxygen-gen-config, /app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/oxygen-preview"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@miniflare",
      "name": "cache",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a87e4f0b8cdbee61dd40795c68eb8fd0a517b916cd4ae07f1d4ee0a687a9955f09e8280d24671e56640265564bc9c803299b40961c86135824a4999e5bb182cb"
        }
      ],
      "purl": "pkg:npm/%40miniflare/cache@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@miniflare/cache/-/cache-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@miniflare/cache@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@miniflare/cache/-/cache-2.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@miniflare",
      "name": "core",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d281012d5e40337c71b3a4d2fbbfdf9f831218d05f854155bf8d51f2e73bd87d5af3dfa405f468cfec58236467277628fb07bae94814ddf5dd1be4762b211295"
        }
      ],
      "purl": "pkg:npm/%40miniflare/core@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@miniflare/core/-/core-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@miniflare/core@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@miniflare/core/-/core-2.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@miniflare",
      "name": "shared",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ce6e0a9b166977a9eb4806d65af1f36a901a941fd5ed23aaddad6b53615af1d2bccab1de4f0dfea074ca31cbbbf5aebf730408a9289c6b701aa51208cf979dd"
        }
      ],
      "purl": "pkg:npm/%40miniflare/shared@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@miniflare/shared/-/shared-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@miniflare/shared@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@miniflare/shared/-/shared-2.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kleur",
      "version": "4.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a3e34efbc5ab462404138ffb9f044984dd475a9566266e75d690475313cbb69d015084b3941a653916129937250a726f42adad2aefec825df156991ced95ae41"
        }
      ],
      "purl": "pkg:npm/kleur@4.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kleur@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@miniflare",
      "name": "watcher",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2839d81603b099eee200c1b8ea4ab8439ee417449a9df5edf20c7b0c6bdd44fe3902fc60e696de52261e9510c94d0ed04659debad48a5512b65fee29e3239db"
        }
      ],
      "purl": "pkg:npm/%40miniflare/watcher@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@miniflare/watcher/-/watcher-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@miniflare/watcher@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@miniflare/watcher/-/watcher-2.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "busboy",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f121506e0ff4850f71cb750d4c1d18127b0d05b59f85fed1b67ce92fb4e40624c145fad0f45c5c9f3ed526c95e269ca9eab54bbd78ae391aa39478b9abe3d8b8"
        }
      ],
      "purl": "pkg:npm/busboy@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/busboy@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "streamsearch",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31c739c077a1a7d697cf56b1e9b654c98e5a7e0f6edabbf972a408de646b624182f2b5b684cd368d6bb08ed2fef8b4b9aa29d2ca18f641f2f236cb9cf95b04c6"
        }
      ],
      "purl": "pkg:npm/streamsearch@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/streamsearch/-/streamsearch-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamsearch@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/streamsearch/-/streamsearch-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dotenv",
      "version": "10.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae5062f5df23a6ff527f59253e335f140b960e328bc1320927f571b684f0211ea19d9c5c10e402660da820bdcc581630e46a540ca3849cd0fb2d74db229434dd"
        }
      ],
      "purl": "pkg:npm/dotenv@10.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dotenv/-/dotenv-10.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dotenv@10.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dotenv/-/dotenv-10.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici",
      "version": "5.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "304bebc8f2dfd7c1ef9426cb4b3096d14d3420c7ed286239b9d9e3ad06c2e43e0fd07a1dc1f7e1bfe8867d6b89c20d7a63f4cad756452bc8be04f556db3fde03"
        }
      ],
      "purl": "pkg:npm/undici@5.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/undici/-/undici-5.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici@5.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/undici/-/undici-5.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urlpattern-polyfill",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ce13ce2f653d9f11c97d82a0944dc9c0c39658e48779e62914733892527b6e1052f7a51bdabe0e64c039931142647821c89d3955fc77b11689a0627ccee6475"
        }
      ],
      "purl": "pkg:npm/urlpattern-polyfill@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/urlpattern-polyfill/-/urlpattern-polyfill-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/urlpattern-polyfill@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/urlpattern-polyfill/-/urlpattern-polyfill-4.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@miniflare",
      "name": "runner-vm",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed4ec13e0cda8a4c169003289e59b2cb8943a56d47ee6a8716becd74af6403a05b5d9d8663ababa3af50b06c3473863fbf2281a1d2a2a9702ae7788674cdcaba"
        }
      ],
      "purl": "pkg:npm/%40miniflare/runner-vm@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@miniflare/runner-vm/-/runner-vm-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@miniflare/runner-vm@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@miniflare/runner-vm/-/runner-vm-2.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@miniflare",
      "name": "storage-memory",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c874110573063bc8b09ea303b7e29e5b6a346cbd4d57b908d722a7207e2095b75faa6b70f4b1e10b4e95b5352144273c6e955b6efcab12704ba0f468a912dec"
        }
      ],
      "purl": "pkg:npm/%40miniflare/storage-memory@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@miniflare/storage-memory/-/storage-memory-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@miniflare/storage-memory@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@miniflare/storage-memory/-/storage-memory-2.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "connect",
      "version": "3.4.35",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71d798cafe0a5a8120a412124f15afa98b15cb8e380cea9e8621777ccde77b5d00989eb6452c8d9149f13095c7416450417d9e47de26e72d486720f006357d15"
        }
      ],
      "purl": "pkg:npm/%40types/connect@3.4.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/connect/-/connect-3.4.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/connect@3.4.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/connect/-/connect-3.4.35.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/connect"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "mime",
      "version": "2.0.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26eb3db380836eac2871ce693809e1f1285fae731c3c7b8963355c49453b96b87c362e47b88a97de88a52fcea9ddd953ae4d0bcc7442800fc643bb8d0b0ea5d9"
        }
      ],
      "purl": "pkg:npm/%40types/mime@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/mime/-/mime-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/mime@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/mime/-/mime-2.0.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/mime"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d2094eff541d65a0858165ed7868460753ffb550c107a1a3bbab108e5493b0f46807ef65405a9a7135c8d4fb1f5ada4dc648805734ac57405a91bef67bbebdc"
        }
      ],
      "purl": "pkg:npm/mime@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/mime"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/mime"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/mime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semiver",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40d2360a19ae8a8182d7fc63c98c3265800320b5b25ba0264b5507ea00e3fd21545144b8301016b3fee6c679113dcfc5e221decc33fe3bcb7474ef161e210e76"
        }
      ],
      "purl": "pkg:npm/semiver@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semiver/-/semiver-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semiver@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semiver/-/semiver-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b45904f481ecc7bb0e80758d4cda3c543bcdd18dfd073fb4a4d43b578fa8f5130910359ac7020d973d696aeb6a2a12162f38dab9a640b663da0f963593a0b99"
        }
      ],
      "purl": "pkg:npm/typescript@4.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-4.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-4.7.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/tsc, /app/packages/hydrogen/test/fixtures/hello-world-ts/node_modules/.bin/tsserver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tsc, tsserver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/tsc, /app/packages/hydrogen/test/fixtures/hello-world-js/node_modules/.bin/tsserver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/tsc, /app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/tsserver"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/tsc, /app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/tsserver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "prettier",
      "version": "2.6.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca6664dcb102fdfb2eb7efd0e6a7a3a7a47d3b5accc73dd76911c357a917f0cac60213923ea54045b0e2f8466f227069c3e067097dd30f6e346f256439f42c1e"
        }
      ],
      "purl": "pkg:npm/%40types/prettier@2.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/prettier/-/prettier-2.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/prettier@2.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/prettier/-/prettier-2.6.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/prettier"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-js/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "react",
      "version": "18.0.14",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c78806b804928969a8d318c32e99b998f6f9dacc991c9c74d9529ba9429d2e62ad030221eb75c2946b224c8d4ae833b9abba31e3102c42b53e1a5dfe8065c5f5"
        }
      ],
      "purl": "pkg:npm/%40types/react@18.0.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/react/-/react-18.0.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/react@18.0.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/react/-/react-18.0.14.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/react"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-ts/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-ts/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "prop-types",
      "version": "15.7.5",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24207c0ba4a70e841fd1c37272a77fdf903b3237272be653a84ee3b9d4baa3bbadc540a0ea298983740adaacc72acce54e3723d9c9fe370301da2f7ab9ba63ef"
        }
      ],
      "purl": "pkg:npm/%40types/prop-types@15.7.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/prop-types@15.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.5.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/prop-types"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-ts/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-ts/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "scheduler",
      "version": "0.16.2",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "869a501010e69708450172895f62a758b62ee7231f8bdd726b33dbda5fa56c98b05bec1da3580d79103edd180d48edfd5985f67ae7b2e35284c27a9eb14d897b"
        }
      ],
      "purl": "pkg:npm/%40types/scheduler@0.16.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/scheduler/-/scheduler-0.16.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/scheduler@0.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/scheduler/-/scheduler-0.16.2.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/scheduler"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-ts/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-ts/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csstype",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b97d4a1bec7d87984826c68a47dc4751e52b6b17fc20e0cec2af492cd3eae81c01d386bfc60a6adeb731e3b979059bb9cc13e5803df8dad7647b71e89bf9c944"
        }
      ],
      "purl": "pkg:npm/csstype@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csstype/-/csstype-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csstype@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/hello-world-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csstype/-/csstype-3.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@headlessui",
      "name": "react",
      "version": "1.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd590ab5e0f19717f77c4d0a6df3bdb7ad0a0b594ced836966080ba70cd5360d49ff3c0bfa1fb837b3019450d5a489d9237aca9591a9371d0f5ac1bff5cdaf42"
        }
      ],
      "purl": "pkg:npm/%40headlessui/react@1.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@headlessui/react/-/react-1.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@headlessui/react@1.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@headlessui/react/-/react-1.6.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@heroicons",
      "name": "react",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "249097c9d38558c0e908fe2ad77884a65039d373103b7c4ba1988aba6fbde79642b4720d5a7c76e82531571c4542efee2dbe0b5b781ed79669cc89172a427ca1"
        }
      ],
      "purl": "pkg:npm/%40heroicons/react@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@heroicons/react/-/react-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@heroicons/react@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@heroicons/react/-/react-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clsx",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ebf6cf868eb6e29dd2da9332bcfe642813d79c8dee7c72ce6c11427e0c7e2e4791e658365d8cb686a66a51fe39ca90fc08e9f66e1806252504fa5e5d84d06278"
        }
      ],
      "purl": "pkg:npm/clsx@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clsx/-/clsx-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clsx@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clsx/-/clsx-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-use",
      "version": "17.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e06cd4c2037dd697bc732097a09f51e7741e2a4d2f6ed37414c323727149d76b0799904e0aab6481f98a31c7ca9bb21919198043bd45db5d64549900dc659fd"
        }
      ],
      "purl": "pkg:npm/react-use@17.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-use/-/react-use-17.4.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-use@17.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-use/-/react-use-17.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "@types",
      "name": "js-cookie",
      "version": "2.2.7",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68b9166b40b4bcee5be12afbf7c136e9080e92cb3af149f46cb8eceeef6ac733d3e421bef03b8d4df7d6112e7c63326cde1ad500eb35c289f272a101a8d26e6c"
        }
      ],
      "purl": "pkg:npm/%40types/js-cookie@2.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/js-cookie/-/js-cookie-2.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/js-cookie@2.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/js-cookie/-/js-cookie-2.2.7.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/js-cookie"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@xobotyi",
      "name": "scrollbar-width",
      "version": "1.9.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37cb64000089c76c30f2f14c9de2666808268c01b5b6754164944b45cc74eb5b66b0b4591d211948bb865a7c0fb6e9ec48bbd2a97436c1fa7b320aa0d48fb675"
        }
      ],
      "purl": "pkg:npm/%40xobotyi/scrollbar-width@1.9.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@xobotyi/scrollbar-width/-/scrollbar-width-1.9.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xobotyi/scrollbar-width@1.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@xobotyi/scrollbar-width/-/scrollbar-width-1.9.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "copy-to-clipboard",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b5deaa3a9081d34e90a6f3f5aea7ed1bd66556113beeda420cccaa0af05a642e417196dd339d400770cce8c7e4fcb0f96ab595eadc2ba5123407b1888614953"
        }
      ],
      "purl": "pkg:npm/copy-to-clipboard@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/copy-to-clipboard/-/copy-to-clipboard-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/copy-to-clipboard@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/copy-to-clipboard/-/copy-to-clipboard-3.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toggle-selection",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "062652f82d4e4bc83fab64516c99b2e7dc69ca084d06aaebea4e4bfee281191b137f19aeddf7e246777c9a518f5156b283ca6f7e2e6eadf9eef1353b0d53a42d"
        }
      ],
      "purl": "pkg:npm/toggle-selection@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toggle-selection/-/toggle-selection-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toggle-selection@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toggle-selection/-/toggle-selection-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-shallow-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cfb5a6b7f1c3e05af68216644d86573a346ee9bfa3541ea8cf815024586a01f6640cc18076eff2b40af38ce42cf2faaa53ddef1727a43868f027ce9369ccd6b"
        }
      ],
      "purl": "pkg:npm/fast-shallow-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-shallow-equal/-/fast-shallow-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-shallow-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-shallow-equal/-/fast-shallow-equal-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-cookie",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ef747d8bcc8fc4019714c00f3ed2728db561ea4be6668a32c0df4470640d1ba3b4e809c9232b93241a18c40fd2a845c5cee8168623723d508cd203514a14f39"
        }
      ],
      "purl": "pkg:npm/js-cookie@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-cookie/-/js-cookie-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-cookie@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-cookie/-/js-cookie-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nano-css",
      "version": "5.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd207d5f5d9b6cdbb800b06eee78a0260455899ea36b7394ec27ae895d733086d739d9a42da860b4f9a1dc604e943c5b298d028adaa53dd3917869412d2a7eca"
        }
      ],
      "purl": "pkg:npm/nano-css@5.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nano-css/-/nano-css-5.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nano-css@5.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nano-css/-/nano-css-5.3.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-tree",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b51a5da6917b4d16b366b8c9eafdecb73bfddeac51712b05996e9c5f4666d8d54aa71135595d476e59e0855bfd4eb7a2ade1e4a88fd50c4b1fa25445d69eb2ed"
        }
      ],
      "purl": "pkg:npm/css-tree@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-tree/-/css-tree-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-tree@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-tree/-/css-tree-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mdn-data",
      "version": "2.0.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "767eb0774bb0e46b1db303c57ec80ca79352074fda0dee9f2bde18255fc02436172fa1d52d606cc5eabb8ecec077e994d8af4b025c2993a90dd83e66c023d5a3"
        }
      ],
      "purl": "pkg:npm/mdn-data@2.0.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.0.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mdn-data@2.0.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.0.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastest-stable-stringify",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e28c7b9e0867742eaa8d2bd6f9a02307734325b89031d1cc2a01281b58cbe43b4d6509880885a71544b71a0f3dd09f260844d2510f031be3556e4faa4727dd5"
        }
      ],
      "purl": "pkg:npm/fastest-stable-stringify@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fastest-stable-stringify/-/fastest-stable-stringify-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastest-stable-stringify@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fastest-stable-stringify/-/fastest-stable-stringify-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inline-style-prefixer",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02ca9acd9f0a711cc9f583cdd70307d9a34cee591643cb523eb5b9b83935ce26308803d64999d4b02ee57d9abe043a8bab3d01e0f868e70b1c59c27356f4730d"
        }
      ],
      "purl": "pkg:npm/inline-style-prefixer@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inline-style-prefixer/-/inline-style-prefixer-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inline-style-prefixer@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inline-style-prefixer/-/inline-style-prefixer-6.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-in-js-utils",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c91744a9253f9675b555b7400e629f42f069eeaee4652ff5055bbf77da72d69852d04da584cd3050131eff867e01b95f9638def988056249424b894dcf29ba4"
        }
      ],
      "purl": "pkg:npm/css-in-js-utils@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-in-js-utils/-/css-in-js-utils-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-in-js-utils@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-in-js-utils/-/css-in-js-utils-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hyphenate-style-name",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca01992e39977cf1e3f995a1e8bc1b0b7ee5e373217f3b717ad6c50a8613336563908529787812367ed02325458fb610d5697d09bc39b21a255493f35af0b631"
        }
      ],
      "purl": "pkg:npm/hyphenate-style-name@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hyphenate-style-name/-/hyphenate-style-name-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hyphenate-style-name@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hyphenate-style-name/-/hyphenate-style-name-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a107dcc292eec41938ff1d0411cf969440451ea10647d9b59c96d444acea72989e1ba1813ac0bf536ebdb792b44f499f82e73a8d4ab4b0f8273bb196786fbbe"
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rtl-css-js",
      "version": "1.15.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7d0aee3034d221ac8d74c7151a0011ec743ab36a5ad245389ee0678299b195b9e866e288fe7c8cbc7d3cc1fb5ea998a7bc06ff6b97e8712017b3e8ac44c537b"
        }
      ],
      "purl": "pkg:npm/rtl-css-js@1.15.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rtl-css-js/-/rtl-css-js-1.15.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rtl-css-js@1.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rtl-css-js/-/rtl-css-js-1.15.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stacktrace-js",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25ee6f05e6384b5aff4672f274b9744c14e2dc5daa75f5a662c1afb5f660108f920a9acfa696888507f99c671a978808e1c1a9095fddb8b700cd3d67a7ab10aa"
        }
      ],
      "purl": "pkg:npm/stacktrace-js@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stacktrace-js/-/stacktrace-js-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stacktrace-js@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stacktrace-js/-/stacktrace-js-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stacktrace-gps",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19c5206cee09b2aaa0e91c5fc931c588fc5d3ea17edcb1664219bb3200ae610398b96caac68e69c113f3e5dfeeebf59825d12759f2b8afe8c66f20fc4d28205d"
        }
      ],
      "purl": "pkg:npm/stacktrace-gps@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stacktrace-gps/-/stacktrace-gps-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stacktrace-gps@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stacktrace-gps/-/stacktrace-gps-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "323664569d0d1ebe7e4cf8a12dc69daa7955a062285a8e08047a6dbad1a1f70237b6d518bc21b6e87912b838be2ba96c676e6cc9725771cb70832542b7fff1a8"
        }
      ],
      "purl": "pkg:npm/source-map@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stylis",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "955accfdb35d8555f63a004535ad9827d2f18fb90fcf29627877774cd8ee184d117bd241ee3a0be5550a3951f591d34d2538063e94fc866c0800f2da4b211515"
        }
      ],
      "purl": "pkg:npm/stylis@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stylis/-/stylis-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stylis@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stylis/-/stylis-4.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-universal-interface",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "760f325dd7109af811d774489596d34503a852b0dc8855684816482f08c4d8b1484b1659f25a1524a024bb3b309798ecf011dd6bbf5b21bd9bf387a153c2235f"
        }
      ],
      "purl": "pkg:npm/react-universal-interface@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-universal-interface/-/react-universal-interface-0.6.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-universal-interface@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-universal-interface/-/react-universal-interface-0.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "resize-observer-polyfill",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f066ba2d7473a8d769d0b99947126b6e5dda86a0e0f43a16b1a2968d1715b3227a4481a2d6a15b8031b4f38b1ba8b02c769c41b9f278335b7bf1756a3122076"
        }
      ],
      "purl": "pkg:npm/resize-observer-polyfill@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resize-observer-polyfill/-/resize-observer-polyfill-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resize-observer-polyfill@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resize-observer-polyfill/-/resize-observer-polyfill-1.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "screenfull",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f416a47ec3b669440dd8af4575b8fced1248119f3643d2068a6ec5a8ce4eb1e6dfa050ba6475e00eafcabe78ae2d33dd78cf30636a3a0e3dd643b29e4028f770"
        }
      ],
      "purl": "pkg:npm/screenfull@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/screenfull/-/screenfull-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/screenfull@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/screenfull/-/screenfull-5.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-harmonic-interval",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02120290557ce2d04fd5a5aa3f02d9a85bc0c2a128540f64c4d327886114bf33a59b8bcb98e14b8934f7519e9bce2253cb86ce569cd61937d209b99a6b21b1f2"
        }
      ],
      "purl": "pkg:npm/set-harmonic-interval@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-harmonic-interval/-/set-harmonic-interval-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-harmonic-interval@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-harmonic-interval/-/set-harmonic-interval-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "throttle-debounce",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75311658dbba2667955d8d196283ee1f971123073431e19b2706a1f4a50d612270a26990a42cd3c924e911ef06b35276dda79612e0286dee0083b10756dfcb3a"
        }
      ],
      "purl": "pkg:npm/throttle-debounce@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/throttle-debounce/-/throttle-debounce-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/throttle-debounce@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/throttle-debounce/-/throttle-debounce-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ts-easing",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67ce845be7c5161fc8141d5fa90dfffbb6697fdb7679b380c4d23f57a5a8eebe60aa2aadc66813950d6a6ea41c8cb2987921cf4ec126be52540e0fc4b8bd2e1d"
        }
      ],
      "purl": "pkg:npm/ts-easing@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ts-easing/-/ts-easing-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ts-easing@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ts-easing/-/ts-easing-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "title",
      "version": "3.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5622c93328394c5c1643b02aaecdded083c8340f7dfbe70e2f340522e070eab28f867f02cfb27bb1db1a8340503c27f88a9edb1d8d7f76873291b41ed91e0de9"
        }
      ],
      "purl": "pkg:npm/title@3.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/title/-/title-3.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/title@3.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/title/-/title-3.4.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/title"
        },
        {
          "name": "cdx:npm:bin",
          "value": "title"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/title"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arg",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a4ed31339752aabd31acfeeca19873bfdd72dddedd54794e08b2dbcf5d5cc63cce76d9c4e3aa3359f7d7ac0a470be76b23aa3a3c7bc09305c5a1931bc6ce803"
        }
      ],
      "purl": "pkg:npm/arg@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arg/-/arg-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arg/-/arg-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "033e73251d8206e8daa76aea5c668929a3c7c89d08ad48a6bd8357fa7702cbc3c93f896d3864eb1d4228d3ded968bdb331e298a6209da83bd2eb376b4c5a24dd"
        }
      ],
      "purl": "pkg:npm/chalk@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9c411fd46ef23dc489447504f54d0ab0a17b4495d1316c2100260468e585e59922a3bfa4e11e73fdfefc066b582bd7d19fc3e2e415decaa98321ceb442e4963"
        }
      ],
      "purl": "pkg:npm/supports-color@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3fed67dcc9f08d1fc4a60f41068d4a4fca9bc9eda0d8ebb8b05ba68a1c2de88e2db145fb8e72dc5f80533922a0fc1d59ac860c37d15c1271b8c796bb341f049e"
        }
      ],
      "purl": "pkg:npm/has-flag@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clipboardy",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7a2ab04e57b6c7987771710882bdf50561517211a878148f2f613d45afb086480e06fb10563047d4110252d61c5e1c6b48f63bb5073b3db9749b8f91d9280af"
        }
      ],
      "purl": "pkg:npm/clipboardy@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clipboardy/-/clipboardy-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clipboardy@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clipboardy/-/clipboardy-1.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arch",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39ffd1d30aa9f377201e8cdf2182db04c9de8fbf54fd254638ecae07755516fd4d44cfcf48530ad76c7d295b6263326a9a7539591daaa74679ac76fbb161a715"
        }
      ],
      "purl": "pkg:npm/arch@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arch/-/arch-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arch@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arch/-/arch-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "0.8.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc3592f916f513c065aaa8402d2b7d91486cb3c42ae273778a87f782c39dc88364b0495a3f2341b4a50c4d1eb6aa1be05564740aa097eec76729ee0c9d46c510"
        }
      ],
      "purl": "pkg:npm/execa@0.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-0.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-0.8.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "execa"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build.js",
            "line": 1
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a53810279282d1dda1718f1ec8bd48ce504f6234e4c87ef65d164f9cbc8abacda605f36342cde496a6c95365482ea66bc80654b7d24e6f787f996332db7fdfe4"
        }
      ],
      "purl": "pkg:npm/cross-spawn@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "4.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b166656c43f63ac1cd917acc97919893f8ca93bd0c06783a514e1823fa860d86e07fa61b3f812f9aa2126d70a826244ab3ed5b4a9147560431bc9d7b176962e6"
        }
      ],
      "purl": "pkg:npm/lru-cache@4.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pseudomap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ff6303616fc964d59cf6f9b5d7a52fcb2bd3a2b22659d5236c48bc4dd71d8e5d51215b60a4affee6584e6fac2d594e22650fd835f635accd3989b01fa812915"
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pseudomap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9dc4f31d5ecdbec4199187b50d6edc6c32e6d18a731e6645e6bfe2c8fdd99d0b4c889fa98f38ac0a230d23e4a3fb1405e695e1487c52077b836ec053cd8fdcd8"
        }
      ],
      "purl": "pkg:npm/yallist@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a585d214b956a473c489ea42b4cc015b886cd11733676388d4b846d5f5444ea3863ed0dcb87e3bdc645553783038a1da45c8e4336b0ea15ee9094aafdfdbcb1"
        }
      ],
      "purl": "pkg:npm/get-stream@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b903e6f2472ce3b8f1dfc6ad01c593571ca5b506283d3ebccbd69661d57ac965d2c96f26cd26add132fa0a259d65e09d1772ab02fa55b671db4efe1137eaea75"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "949c596254f80d6fdb454b45875310216aa62f041f0319ea586e0784476332592b2589c99f426baf6bb79a0c6a696b1d88173be936244c6fe686b9d84eecdf1f"
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c809bda9f4207b152fb4791d68a969c7869d0596318b64258113d6a2c745327bd5bc2d340fc0c4d8546590588c3d45d4220e0e3e7a95d0383c08609b5225aa3"
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-eof",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec50b01869b1f260f9c5077744f52f9d2a545c7337056bb38eda43e135ec7dc67d10be1acef55552c7056300fd9f1f0a87eb82042d345c1b40ca4a0c1f04e1f1"
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-eof@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "titleize",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c04546fbcf5a46be52f180f93efbbc09e9ac9c5c5dc6274b0d4814c0b13b89ad01b942e66591440ffb397e9db8c087880c5fdc83c3d65892531deef01f24a13"
        }
      ],
      "purl": "pkg:npm/titleize@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/titleize/-/titleize-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/titleize@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/titleize/-/titleize-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-base",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "476001cbea2139f6402ae9999244e63f5d4d5aa8f4006ee7660df2caf9eecf397e0f418bf46bbc8cedbe0ffa000fed38cfeff3d007ac30efeb9dc068a0752cee"
        }
      ],
      "purl": "pkg:npm/typographic-base@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-base/-/typographic-base-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-base@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-base/-/typographic-base-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "textr",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c90ac5df0f5387236fc898e4a454f0069b15c51438f3bd311e0d9fb9ed7178ad49d44648c79715ed73d6e85c22fd7342d1dbbfdedf4235666f94751f0b13e93e"
        }
      ],
      "purl": "pkg:npm/textr@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/textr/-/textr-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/textr@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/textr/-/textr-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-apostrophes",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dffd398f4be0f68b0fcb8c219e28466ae74f2f0371bb27333b70189ac55e2d4054abf68a85b49f6e354fc7557357b470a646e5d2f7fda8ec0e2cfe8281f45666"
        }
      ],
      "purl": "pkg:npm/typographic-apostrophes@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-apostrophes/-/typographic-apostrophes-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-apostrophes@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-apostrophes/-/typographic-apostrophes-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-apostrophes-for-possessive-plurals",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b01500fec15300516377f7b2f57b6577572ad9f5c2649d2d4079a50e8bedb4c0bd0f55890ceb767f8f5bf43c40d1893688adf2a03166d07400b3f98a3b6e2c0e"
        }
      ],
      "purl": "pkg:npm/typographic-apostrophes-for-possessive-plurals@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-apostrophes-for-possessive-plurals/-/typographic-apostrophes-for-possessive-plurals-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-apostrophes-for-possessive-plurals@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-apostrophes-for-possessive-plurals/-/typographic-apostrophes-for-possessive-plurals-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-arrows",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4659a11e3c4e490f508d641b74714f6fe079e215502f1c16bdb3be962ab2e4d3749da2d4cea9d9ba6607dd5fd1ad1f577fa729019bf129d9b0633a68ce5c7652"
        }
      ],
      "purl": "pkg:npm/typographic-arrows@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-arrows/-/typographic-arrows-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-arrows@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-arrows/-/typographic-arrows-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-copyright",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d2c7d7e88ce568061b58c39661d2bf528455a08ee330507eb5e65db53970db8b79b6165fdb053e723286636d9cee279d64885eba0a74d37c93f966ee7355932"
        }
      ],
      "purl": "pkg:npm/typographic-copyright@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-copyright/-/typographic-copyright-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-copyright@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-copyright/-/typographic-copyright-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-currency",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69d94de153b90f0612c769317e3d40326c7e1461e7e928454b7aa2a74437570043eed484344e1751bb36d9bf6194af60e2d870f2666c2f25d2ddc6bbf7d81885"
        }
      ],
      "purl": "pkg:npm/typographic-currency@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-currency/-/typographic-currency-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-currency@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-currency/-/typographic-currency-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-currency-db",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d6bb4bbd3f89a6a59f9eeb67ff187ad2294a704b85a63711ac488dd9ad965899f2659ad8c0f96908b7e46fa663341fc673cb21733984627d5e546f1a1e4dc03"
        }
      ],
      "purl": "pkg:npm/typographic-currency-db@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-currency-db/-/typographic-currency-db-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-currency-db@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-currency-db/-/typographic-currency-db-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-ellipses",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4cdf3785cbc37ef3c5c6ac964dee1ab1c7b14a3d70c6ecda7e75eb2d2edc659ab96447876103c4e145cfd799999ec360ef5cac9ce27174d5d6724c6a79354c01"
        }
      ],
      "purl": "pkg:npm/typographic-ellipses@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-ellipses/-/typographic-ellipses-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-ellipses@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-ellipses/-/typographic-ellipses-1.0.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-em-dashes",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5a0a4d42aee6f1d18096b23d8f2420fb3c8229c7a7417723a880f2f994e42e1f6808c99b52329ece1aded209ca67d01c5b4e821a976b77f129d23a1b1a814f4"
        }
      ],
      "purl": "pkg:npm/typographic-em-dashes@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-em-dashes/-/typographic-em-dashes-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-em-dashes@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-em-dashes/-/typographic-em-dashes-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-en-dashes",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd969feb8ab4b42259e32c406c15549a880f075a55daea6243abf7694de4bd4f87c440bcb335e644503ac034d49003fa615ae70d880795468bcd4bca7055128b"
        }
      ],
      "purl": "pkg:npm/typographic-en-dashes@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-en-dashes/-/typographic-en-dashes-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-en-dashes@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-en-dashes/-/typographic-en-dashes-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-math-symbols",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18161b27365b1111d927d79f96ca8540c7d90c12460a482e31755b59eac6d4f9329dd345380e9f611d47fa3521f494a86ebee2aff0bdd9027eecbadc06c01b57"
        }
      ],
      "purl": "pkg:npm/typographic-math-symbols@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-math-symbols/-/typographic-math-symbols-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-math-symbols@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-math-symbols/-/typographic-math-symbols-1.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-quotes",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "add6c9c76868ee8bdc92bf9877ecdc714dd49d3c92d14fa5c04cc197416830c1027b0427ed9334b4b30158f12f38e1cf1c289868fd82d16c7d2ead45f8ebbcca"
        }
      ],
      "purl": "pkg:npm/typographic-quotes@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-quotes/-/typographic-quotes-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-quotes@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-quotes/-/typographic-quotes-1.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-quotes-l10n-db",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13dfd7481256b666b1f5790594bc2a6cd5b9c0d1416cb84bd820d84a1990fcac3cef02fd4f0294dfa8fc48e37b468d0ad8617e4637dc61bfd27543775ea664be"
        }
      ],
      "purl": "pkg:npm/typographic-quotes-l10n-db@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-quotes-l10n-db/-/typographic-quotes-l10n-db-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-quotes-l10n-db@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-quotes-l10n-db/-/typographic-quotes-l10n-db-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-registered-trademark",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a718d8e6189c7421fe54f133aa0a189500fd65732a68966038bac0c1e233065d7d86ce922cb75ff020f491717a8eff6ce104428d397fba26a856489dea9688f5"
        }
      ],
      "purl": "pkg:npm/typographic-registered-trademark@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-registered-trademark/-/typographic-registered-trademark-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-registered-trademark@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-registered-trademark/-/typographic-registered-trademark-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-single-spaces",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3937eb83ace6031d975da697cb07457c5209ff0d9edbf0d9751c012be22a2478c41333740b542d43b9243825bf45d7f4e12d4aeb7f5671bdf2e4e3d594fe337b"
        }
      ],
      "purl": "pkg:npm/typographic-single-spaces@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-single-spaces/-/typographic-single-spaces-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-single-spaces@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-single-spaces/-/typographic-single-spaces-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typographic-trademark",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77ebc51226a051596d63f7050f6c330136f5619bcebf1f929b11ed0aad502dcdb69889a4a4071c383f36e9de9e442505c7be5e1a1b04de75a334a3ac8acd886e"
        }
      ],
      "purl": "pkg:npm/typographic-trademark@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typographic-trademark/-/typographic-trademark-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typographic-trademark@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typographic-trademark/-/typographic-trademark-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@shopify",
      "name": "prettier-config",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6e8022fdb0f1b398e6998de4466965168478006de9ab4bacfe47bbfa830883f818aa49ea0584863e8a62e97dd142569b8e19a9691de0afea8de0bfef841ecd0"
        }
      ],
      "purl": "pkg:npm/%40shopify/prettier-config@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@shopify/prettier-config/-/prettier-config-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@shopify/prettier-config@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@shopify/prettier-config/-/prettier-config-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tailwindcss",
      "name": "forms",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a52ac578907a060d4cae0f427505b7fa1a995c02ac06b486f4c01f14b2b2d69540e0c6f85bb0b493b984865992d837e8fe8b71ad03844fb349889f51ad2e7adf"
        }
      ],
      "purl": "pkg:npm/%40tailwindcss/forms@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tailwindcss/forms/-/forms-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tailwindcss/forms@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tailwindcss/forms/-/forms-0.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tailwindcss",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36bc5b155e2d62c81afe1a566d1c947c8681acd3170f1c7906c1e0052e2fe6d9728dffac0ec8018399bd3b18eb5c8a804bfb91f6489cc4b28ff9b10723b05279"
        }
      ],
      "purl": "pkg:npm/tailwindcss@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tailwindcss@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.1.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/tailwind, /app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/tailwindcss"
        },
        {
          "name": "cdx:npm:bin",
          "value": "tailwind, tailwindcss"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/tailwind, /app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/tailwindcss"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arg",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d88f214e2ca43dcb9ec9bd0e902e8f1d02036ab3087c33544c25875076e4fac5b59280adfa3ff67fbfea7cf3ca4cebd8cc31f4bc5ddf05e88d6443f23d1d41a"
        }
      ],
      "purl": "pkg:npm/arg@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arg@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "3.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ebdec7ca44fea84dc8dfd8999498525f79532f5c175e83107489543979bd95d74b852540804bc381c9975503255bf315cdcf71a38d3823f642d6b194ea13a93"
        }
      ],
      "purl": "pkg:npm/chokidar@3.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@3.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-3.5.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f8dde3df38022ea6482e1d4c9cadce2a27d933f198ae3948a36844f05fb4c7b7463f18d2bbbf469af2b63cd7ac568d9eeb25d0395dd31ca5515328cabe46f5a"
        }
      ],
      "purl": "pkg:npm/anymatch@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e9e66ce4bb375ad0a2b075a9f52d86532f1daa4a468b80554b3dc66aa884e9ecee6f4e75d844b3b57530501e82e8829b4246363e76ff983e166288c24707302c"
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64c11161eb3aa43c9dcae1a276c7bb3ac1f1b5b23b595794128ce047f83baddd31522998365bd9444fcad8c8194e35b2ef6e487de94b79570433dee69ad4465f"
        }
      ],
      "purl": "pkg:npm/is-binary-path@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c372d27f21541b6682729287876e15e93a5341a8635cc1724a268838d84e470cf53041349d8c21dd8a18e3d0396785e43b6e56d3e9d1ce69f340892f28a1028"
        }
      ],
      "purl": "pkg:npm/binary-extensions@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84e4b4f3da27f1176ea9d6e1bd0e59dfb0341128ecab3eaa9d171f7ec314df8f7916e4dda929beedb849dbd26f20eb010c41276a7e433eef6ddd3a3d55194ccc"
        }
      ],
      "purl": "pkg:npm/readdirp@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detective",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfd5c4d73467cf5c11b60bab1aed01b3cb8728549376d79864d6c83c5561519dfd2ff4bbf69a4ca5d995399027a33d637c416875ce3c9fa317e3cdd7a37b75cb"
        }
      ],
      "purl": "pkg:npm/detective@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detective/-/detective-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detective@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detective/-/detective-5.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/detective"
        },
        {
          "name": "cdx:npm:bin",
          "value": "detective"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/detective"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-node",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f26b7e7ec943b9f2d89ed2283c06883147bf96b6eb7a1222c26477b7693d2e58c8ce88a010f176ede2e4da1cbccd21b3991fe882bef36d128834ca35bb4ca1e4"
        }
      ],
      "purl": "pkg:npm/acorn-node@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-node/-/acorn-node-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-node@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-node/-/acorn-node-1.8.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "7.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d0ca9d28d7f98d75b4ced4f3ba9079304ab9a0674313fe3082a4d8b06d48c6a11378765061a89b6842e0a710e2b3813570834656882a10cba4b131e6d0561f0"
        }
      ],
      "purl": "pkg:npm/acorn@7.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@7.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/acorn-node/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/acorn-node/node_modules/.bin/acorn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-walk",
      "version": "7.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38f74217a1ac3083fe033f9a59f000384b76ffe8950ca13ba32ea5274f7c6a87b9f680262bbeaa57a1b0eb449b67c8c7b86db01f4e7c185e292c56d86a662b54"
        }
      ],
      "purl": "pkg:npm/acorn-walk@7.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-7.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-walk@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-7.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defined",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63671a239f99c12e5cdd188d0c9eaee77561407bfe8472b0864235887bdc78a507c3d0dfe842b6cd12df8de8d180cb82bb12bb3df49620cc1679c71e56f4e18d"
        }
      ],
      "purl": "pkg:npm/defined@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defined/-/defined-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defined@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defined/-/defined-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "didyoumean",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "831b727ea320ec62b285099bd39e8aeccdf1b33cbf9b21fcc3e078453f905c142cbc039d7375f29aa0c33c7c750603e0b1d000e522227e89daf3d62d4404c3cf"
        }
      ],
      "purl": "pkg:npm/didyoumean@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/didyoumean@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dlv",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f87972b728e53ca9c81bc5ee446f16be604ff31b3c3fbd72f9228a4ba6575a81202ee78fc6d0e8504887ed691d78f5ab439241a44e9aa15a9f65f2544248d7c0"
        }
      ],
      "purl": "pkg:npm/dlv@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dlv@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f1c08f043a1550816a7a8832feddbd2bf3a7f877a017eb3494e791df078c9d084b972d773915c61e3aefa79c67ed4b84c48eeff5d6bb782893d33206df9afe0"
        }
      ],
      "purl": "pkg:npm/glob-parent@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lilconfig",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5a6265d9b531cf030e66fb12cdf1a6fd0beddaf18995ddab0d48f3804c84dbb70adf6f068b263f21eba1f558c22900b0a4aac2332b787ba10f8f757f8b43d12"
        }
      ],
      "purl": "pkg:npm/lilconfig@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lilconfig/-/lilconfig-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lilconfig@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lilconfig/-/lilconfig-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-hash",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4529fd17af0f8c7f47aad96db129ea602d575e859ef418eee7edb5dd1f7c70d1adb5a83dabdc80393cdd6ecaaf21aeda366e567df059169598af6696ae495603"
        }
      ],
      "purl": "pkg:npm/object-hash@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-hash@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-import",
      "version": "14.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e5c08f95826e1212539b1553e94c84fb494ed1dea9362fb3f276e31ca2489a54ab96bfd77f53e1a6fd001df0d0cbbb291359391cae339e0f63e9d6b31e0531b"
        }
      ],
      "purl": "pkg:npm/postcss-import@14.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-import/-/postcss-import-14.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-import@14.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-import/-/postcss-import-14.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-value-parser",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4d342b3abaeadf9156de5c6e12f09153f6dd7d9b8e480a789ff3358b779a0f499e74427c0c7caf87de3bf8d3c7788f0ffb06db6fe5ac52e48887a0b69534779"
        }
      ],
      "purl": "pkg:npm/postcss-value-parser@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-value-parser@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "read-cache",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b076ffc5b7b2233a09bf8b4c6f3436752eb4403517dec386f6a6b1773963102f12dfbb76d2f055610acad208c2b8951e7a63dc9af804e1a13a43093c429a944"
        }
      ],
      "purl": "pkg:npm/read-cache@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-cache@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9d82c018f9f4e7befee423b69ac5bab058d6f4007881d2a04ef3d3d928f9284e618e81d6eb1c3283fb40765f8b937c9fc54f5474f6bf604ec8d48cd268b6ea2"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-js",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efb404485070817e22ae880654f810e6cd3bbcbbc5a96af6dbca9963ec3a956e7df5c4652bf1e69e58af9e7554c648c79c2bb8275e8f0cc1dc1fe7bed876ef4d"
        }
      ],
      "purl": "pkg:npm/postcss-js@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-js@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-css",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40e4af7af86c9628e0630471e91bfbcca74c17c95b466c7eb901b1dbebc373e288fde067b32f648ade5a8f6dc0806bb7a5ae2df408306e75d6a92fa2398fb668"
        }
      ],
      "purl": "pkg:npm/camelcase-css@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-css@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-config",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8388ce04eefe1ca13138bb303c53ffd686d3f0ca18a29b77b28c43050a7529cdbae42bdc091e02834f6991f876ed4ab77f36e6d56984cea52a63525f0d41e46"
        }
      ],
      "purl": "pkg:npm/postcss-load-config@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-config@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-3.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-nested",
      "version": "5.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "acaaa6d8593429b03c56ddc0746374141f4e04e30355a8cc1ba6427ff1a81e0771509e2c045a7403fb8c2119be30951da37dd85c4b63a88cfcbbb0c0a7c07b0c"
        }
      ],
      "purl": "pkg:npm/postcss-nested@5.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-5.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-nested@5.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-5.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-parser",
      "version": "6.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "210ed365da1aa9b4fe2c2a52860e3a8e7655961583db0ea241801c6177c701167b5f5b7f50686171e403b395f4706a8abd894734ebafece6b5c666f4a10b80df"
        }
      ],
      "purl": "pkg:npm/postcss-selector-parser@6.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-parser@6.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.0.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "cssesc",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd36ff25c8cad75d67352706a1be4c36db27b4d3356823540e2a41fd39306458720ebac4e3b48ec7fd7cc05d9b6e381cdd9cc248a5b54f99ede446c5a00cff56"
        }
      ],
      "purl": "pkg:npm/cssesc@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssesc@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/cssesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "cssesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/cssesc"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mini-svg-data-uri",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afd75e0def69e452543d9024dc0e7dc061fb222f58ae38d6c348e6c3f96249b1e5d821e2c978fa15c0d70eed8add38d5017aa225d6b0df1c7095966bf44ea71e"
        }
      ],
      "purl": "pkg:npm/mini-svg-data-uri@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mini-svg-data-uri/-/mini-svg-data-uri-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mini-svg-data-uri@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mini-svg-data-uri/-/mini-svg-data-uri-1.4.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/mini-svg-data-uri"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mini-svg-data-uri"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/mini-svg-data-uri"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tailwindcss",
      "name": "typography",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "728abc0c100144f15c56154893a21b2b2c8752ded84c40bf0bdf76b5ab4507ec84c79586050ac282c4858f11d4afc0165e985672469d5496e89a29c476e601ab"
        }
      ],
      "purl": "pkg:npm/%40tailwindcss/typography@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tailwindcss/typography/-/typography-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tailwindcss/typography@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tailwindcss/typography/-/typography-0.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.castarray",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "695c7cced3efeffd942db02b189d98e366c6d66110e661a3a5dbeb6c9709154dd36d8c9b7be4252d2e29b2df73579db29b2da29f52a914f8999c03804f10f8f9"
        }
      ],
      "purl": "pkg:npm/lodash.castarray@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.castarray/-/lodash.castarray-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.castarray@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.castarray/-/lodash.castarray-4.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isplainobject",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a125f3696ca908c1e43c2dcdbc111a3c77f42ac0399af3eb38f810583b1b83c9fba2b676f743340660bf8e0459e2f709e834c0863aec49881db16fc5f8c14e04"
        }
      ],
      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.merge",
      "version": "4.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0aa63a97455beb6320ac5f5b3047f5d32b4bdae9542440ce8c368ecfa96efb0728c086801103c11facfd4de3e2a52a3f184b46540ad453fd852e872603ba321"
        }
      ],
      "purl": "pkg:npm/lodash.merge@4.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.merge@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-4.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "playwright",
      "version": "1.23.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa5822cb525930d3f0a41a79b6c51d8d31b1b89fa55d96ed48a98c0dcd3f7f5a15b0d0d75c0fabef3782f4acddfb88d21ed7a8249a1c6ab831571d8c9f5a3693"
        }
      ],
      "purl": "pkg:npm/playwright@1.23.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/playwright/-/playwright-1.23.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/playwright@1.23.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/playwright/-/playwright-1.23.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/playwright"
        },
        {
          "name": "cdx:npm:bin",
          "value": "playwright"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/playwright"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "playwright-core",
      "version": "1.23.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f425ec13481ac2987829797aa1469ad1e8474724998c7be5cb84f26dc0570efccadcdde8e8bfde67c43a89559488c9f42cb4b96d1171a35a84b4e1139582718f"
        }
      ],
      "purl": "pkg:npm/playwright-core@1.23.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.23.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/playwright-core@1.23.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.23.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/playwright"
        },
        {
          "name": "cdx:npm:bin",
          "value": "playwright"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/playwright"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "postcss-preset-env",
      "version": "7.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6ad2287b103b199826ff14c0d1be8b276bb1ac6ddc7c0af60ee61613d76d21729d9902e387a52ce26ee8d9e09a4851c002d363c6e9bf9e7edc6a8d3161e4134"
        }
      ],
      "purl": "pkg:npm/postcss-preset-env@7.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-preset-env/-/postcss-preset-env-7.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-preset-env@7.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-preset-env/-/postcss-preset-env-7.7.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-cascade-layers",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ccfdad40816ee02dc7b9e393f86e0f9256bb7f667aa5f5e985cd58f700c4e634b64ace9d93f6ac43b14510558a832dc491873b1351528f385f799546839b235d"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-cascade-layers@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-cascade-layers/-/postcss-cascade-layers-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-cascade-layers@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-cascade-layers/-/postcss-cascade-layers-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "selector-specificity",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "686db4be49cbe3f623405f41495eedb381169bfcab8da80037b39604d9a56c43948aed25963e0e1ab16838a2b7836bdecb8fe9da898a0a81eb5ad3f14b05771c"
        }
      ],
      "purl": "pkg:npm/%40csstools/selector-specificity@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/selector-specificity@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/selector-specificity/-/selector-specificity-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-color-function",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e43e4d0ff99959c42849f62748fb17b6e885c61ce6871b7aa5c8eb14b27295d8fea7464ddafbd1a58357fa56a1153b4c84060e6b65a691d18836bd323f40af18"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-color-function@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-color-function/-/postcss-color-function-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-color-function@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-color-function/-/postcss-color-function-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-progressive-custom-properties",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01203d5b5688cb9ca0b24658b966a6b3807369f0f5d942ef4b2a6668b253da3bd0f06d0cdc8f0f450842d21ee61b46772c8d39f9a8198ea491f7e2bdc9a4108c"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-progressive-custom-properties@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-progressive-custom-properties/-/postcss-progressive-custom-properties-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-progressive-custom-properties/-/postcss-progressive-custom-properties-1.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-font-format-keywords",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0ed1c66df1da3c15d5415fc20d7edbc8038954aca51209c5947fd2301fd20f58e80a4f6da80191577872e80caee7841d929a4372729e5baf17cd3112c885de9"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-font-format-keywords@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-font-format-keywords/-/postcss-font-format-keywords-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-font-format-keywords@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-font-format-keywords/-/postcss-font-format-keywords-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-hwb-function",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00c6705b21db6cd2c1b030035a6a174fd039ca5e5db0610178948945426df18f67f198aeed6b2db78302f23b4f5bbc6370b79cc9f270b6751335298ecdc9d67a"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-hwb-function@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-hwb-function/-/postcss-hwb-function-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-hwb-function@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-hwb-function/-/postcss-hwb-function-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-ic-unit",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b8ca9b35981a768a3af1ec4f7a457ad05d04079ba178ca6d53383d03ebdfec8c38d9bd0db6b6a884bda370ee91594d43b96fdbd6447cdb1f33fdf942aec3e6c"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-ic-unit@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-ic-unit/-/postcss-ic-unit-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-ic-unit@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-ic-unit/-/postcss-ic-unit-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-is-pseudo-class",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3aab37f7aa1e9eecb231d4573acb715dbc5e8bc7d81204e86239a5607122e6093440b93bc50ef62d8ecd0ebef069600099d57346a3e96c4dba43bfdc52b1aee1"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-is-pseudo-class@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-is-pseudo-class/-/postcss-is-pseudo-class-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-is-pseudo-class@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-is-pseudo-class/-/postcss-is-pseudo-class-2.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-normalize-display-values",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d7fa7c7957c5d3244986b695933ba932c1d4bbdb9b7bd5848b9715adefc5e81d46c42d682809778e1729912662f7494d532e5292222eefe76116a9eeb4bc94d"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-normalize-display-values@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-normalize-display-values/-/postcss-normalize-display-values-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-normalize-display-values@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-normalize-display-values/-/postcss-normalize-display-values-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-oklab-function",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bf4391e8a50ce69d082a8a61bdbf7c36206e1544006c06ade2b4e727e1b9e6fa3e1e9d38106749d6b1a1ff9bd195da8b56190d27c1c7182f9be62cacaf3f5c3"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-oklab-function@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-oklab-function/-/postcss-oklab-function-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-oklab-function@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-oklab-function/-/postcss-oklab-function-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-stepped-value-functions",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abc7386ecd46ba602245e9e616301205c5922caadbcc7cd697a0b61dc680c405c888bdab5255166ea419523c151b9b6279dd2b95dd7d8ff326f742b7a88dbabf"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-stepped-value-functions@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-stepped-value-functions/-/postcss-stepped-value-functions-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-stepped-value-functions@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-stepped-value-functions/-/postcss-stepped-value-functions-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-trigonometric-functions",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1bbf0263ff8678f73a74309351bc08e934c54397ecdcdf4f387848eafd10ced786a5feb2940462254373f47ad12a2e1e55804d5e369ed56dbbeba894105c4797"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-trigonometric-functions@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-trigonometric-functions/-/postcss-trigonometric-functions-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-trigonometric-functions@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-trigonometric-functions/-/postcss-trigonometric-functions-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@csstools",
      "name": "postcss-unset-value",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f51b55860d7114fd13754d603104f42042e76d2e72d03f289676dca990f0be99560d285287fc76174b11f831536ac05f0cd1e0eca2253b1ee9891c283f2ff8e"
        }
      ],
      "purl": "pkg:npm/%40csstools/postcss-unset-value@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@csstools/postcss-unset-value/-/postcss-unset-value-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@csstools/postcss-unset-value@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@csstools/postcss-unset-value/-/postcss-unset-value-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "autoprefixer",
      "version": "10.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca91e3bb863639abfde528a911c09c23927b0863eebf3f286adeec52d623dc294ae386e575fbedbdcc4ae8810afbeeeba81ed87210c6cf07992011be483d1900"
        }
      ],
      "purl": "pkg:npm/autoprefixer@10.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/autoprefixer@10.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-10.4.7.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/autoprefixer"
        },
        {
          "name": "cdx:npm:bin",
          "value": "autoprefixer"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/autoprefixer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fraction.js",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3212ee2beda051c9d97bc64795a68836740b974c5120645f706936ca5f31a1001f1eb4ac2f7ad8bba14298176475b85cf443e5c321877b0691b2fc11309b4094"
        }
      ],
      "purl": "pkg:npm/fraction.js@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fraction.js/-/fraction.js-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fraction.js@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fraction.js/-/fraction.js-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-range",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6dda24fd7bca208de75299259d5e8fda1c6d30dac26e83a301cc81b909d61213baeb9170ad2351c54f80aa9b32bcee8b80660fb2937e96ee422edc388cf44a34"
        }
      ],
      "purl": "pkg:npm/normalize-range@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-range/-/normalize-range-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-range@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-range/-/normalize-range-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-blank-pseudo",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "552f745d6b6c1c6aa8334b782a91f4e777387a1c59d84e87b4623bc7af18155d294e8fd09a457f60503e36796f2bc82ec5954d58642154d2460b7f50f1717839"
        }
      ],
      "purl": "pkg:npm/css-blank-pseudo@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-blank-pseudo/-/css-blank-pseudo-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-blank-pseudo@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-blank-pseudo/-/css-blank-pseudo-3.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/css-blank-pseudo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "css-blank-pseudo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/css-blank-pseudo"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-has-pseudo",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56c7b4c694752bd30d969da3e70d69816209b66d5af2a4b42704bd8281587089a3947126cb03fd554174e5a1815f31a90c917ce905e4e0bd32a419b03e1180af"
        }
      ],
      "purl": "pkg:npm/css-has-pseudo@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-has-pseudo/-/css-has-pseudo-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-has-pseudo@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-has-pseudo/-/css-has-pseudo-3.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/css-has-pseudo"
        },
        {
          "name": "cdx:npm:bin",
          "value": "css-has-pseudo"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/css-has-pseudo"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-prefers-color-scheme",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e01a8c6d992c464250c76cc08eba2488631dd3b46a39ad88c48aeb375d25c817bdc619fd0c4be350aefd27a8e47a2bfd0fd85015729bea0d63c14eb68f388964"
        }
      ],
      "purl": "pkg:npm/css-prefers-color-scheme@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-prefers-color-scheme/-/css-prefers-color-scheme-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-prefers-color-scheme@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-prefers-color-scheme/-/css-prefers-color-scheme-6.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/css-prefers-color-scheme"
        },
        {
          "name": "cdx:npm:bin",
          "value": "css-prefers-color-scheme"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/css-prefers-color-scheme"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssdb",
      "version": "6.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec60ef0d2984fb6d3e59c48c84fd7b435115594acb95bc71a4c0ea1bbdf59fc3fdf498674191d1f58bed8cfbc41df8c5523bd026f7692828e528e5fec5ee1454"
        }
      ],
      "purl": "pkg:npm/cssdb@6.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssdb/-/cssdb-6.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssdb@6.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssdb/-/cssdb-6.6.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-attribute-case-insensitive",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2bb7656776a48b269c8144dcfd3a625c827848f4c6a89e079681aa5d06e50cbb66bf28d27c48435eb06e127624e743018ef5bd5529b4d66007c23dea242ea65"
        }
      ],
      "purl": "pkg:npm/postcss-attribute-case-insensitive@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-attribute-case-insensitive/-/postcss-attribute-case-insensitive-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-attribute-case-insensitive@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-attribute-case-insensitive/-/postcss-attribute-case-insensitive-5.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-clamp",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af2e1bd4b968ffdcf3f8f282fb4df42949cf2134c900778ec237c0cb207ad1e4f4028ac62ddce9e76b37d4eb0f44745ff0d7219201681b6cba7c27e7d485753b"
        }
      ],
      "purl": "pkg:npm/postcss-clamp@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-clamp/-/postcss-clamp-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-clamp@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-clamp/-/postcss-clamp-4.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-color-functional-notation",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5f6ebe85cc5ce3c075cab159e498462b2581bc54d373bc3d6d01768f3d647ded2eab84a239ba1db239f5794c0ce10e4668ab887e721c44a6514373c19ec85b7"
        }
      ],
      "purl": "pkg:npm/postcss-color-functional-notation@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-color-functional-notation/-/postcss-color-functional-notation-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-color-functional-notation@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-color-functional-notation/-/postcss-color-functional-notation-4.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-color-hex-alpha",
      "version": "8.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cba360c2442f5e138c36266b8a8150377c62f7774d641aaef9da95402c5ebcaa918b9b1d90ae4f754132a4754aaaa78e53d4ad5757c22142972ed61a0041f95"
        }
      ],
      "purl": "pkg:npm/postcss-color-hex-alpha@8.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-color-hex-alpha/-/postcss-color-hex-alpha-8.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-color-hex-alpha@8.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-color-hex-alpha/-/postcss-color-hex-alpha-8.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-color-rebeccapurple",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d63b44e402a765c2aae298ceae5b451dc6c4336fc8bed6c3d4e76167fc2a76cd7cfff6e1d1499091f7dc0a4cc3254fbfbc6a1d7c8b1541e2a7fb8e4226f5fd07"
        }
      ],
      "purl": "pkg:npm/postcss-color-rebeccapurple@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-color-rebeccapurple/-/postcss-color-rebeccapurple-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-color-rebeccapurple@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-color-rebeccapurple/-/postcss-color-rebeccapurple-7.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-custom-media",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef28b6e6f0c0a070246e10335fd747c76c9cea7b52e2342f7a3acd702f9cb102405e38f5e5eed57167cc80ba813406cebea8b9b886bd86e395c1d1db7feb0aaa"
        }
      ],
      "purl": "pkg:npm/postcss-custom-media@8.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-custom-media/-/postcss-custom-media-8.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-custom-media@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-custom-media/-/postcss-custom-media-8.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-custom-properties",
      "version": "12.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2b6e3f2456ed344508767d017cd6806ab5dba200dbb8308c61c9fd076db4ad80fb671655a7d3289a613a4b1eb3e725b7df558d6cf5aa56b08a1565c73af05c4"
        }
      ],
      "purl": "pkg:npm/postcss-custom-properties@12.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-custom-properties/-/postcss-custom-properties-12.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-custom-properties@12.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-custom-properties/-/postcss-custom-properties-12.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-custom-selectors",
      "version": "6.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e05649b28960f0983dc96e90a6078e52bef9420facfd086e887ba21eadedb65b968779aea859aec43366e99efd858f723de0bdd56edbd7f4aab04a2e5a1734a"
        }
      ],
      "purl": "pkg:npm/postcss-custom-selectors@6.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-custom-selectors/-/postcss-custom-selectors-6.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-custom-selectors@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-custom-selectors/-/postcss-custom-selectors-6.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-dir-pseudo-class",
      "version": "6.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23c7a9c06cb97ed773356118a24f558d6f70842e319de940b5b6a31afe1a76a978148174f6b9ebc6703d63cc521cde3bcbb82a148bf5d02e7e226b0b789a4a07"
        }
      ],
      "purl": "pkg:npm/postcss-dir-pseudo-class@6.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-dir-pseudo-class/-/postcss-dir-pseudo-class-6.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-dir-pseudo-class@6.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-dir-pseudo-class/-/postcss-dir-pseudo-class-6.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-double-position-gradients",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ccf821a44ece05706e77b0c3e3aeb184d2b22f2c3742aea3338030b97cb23b2470ceee8e901bc0b94d006d1316f5de17417681fd0b64156c6e23a36cbd944ad"
        }
      ],
      "purl": "pkg:npm/postcss-double-position-gradients@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-double-position-gradients/-/postcss-double-position-gradients-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-double-position-gradients@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-double-position-gradients/-/postcss-double-position-gradients-3.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-env-function",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92903a16c2eb6be36a7059cbf354e7b14f99ee8ac6b434f170e865ea9c17784ab5c853e944c9020e91e1af3f021500ebfd67e6d232e2350d4eb0618f8e5a8fc0"
        }
      ],
      "purl": "pkg:npm/postcss-env-function@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-env-function/-/postcss-env-function-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-env-function@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-env-function/-/postcss-env-function-4.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-focus-visible",
      "version": "6.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41c2ae514fdd80db2cb482ba1c42c5453e58de56eb30b10ec06f80e2ce5c03e7f1dc0df2fc94eadd7f4b68e8f7382dc02c7d17ab2ae040881ecbf30867c59ccf"
        }
      ],
      "purl": "pkg:npm/postcss-focus-visible@6.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-focus-visible/-/postcss-focus-visible-6.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-focus-visible@6.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-focus-visible/-/postcss-focus-visible-6.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-focus-within",
      "version": "5.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bef8c337ef82d26bbc8f3e1a7f9779d82075f38a2083fb12c40152fa850942ad92b827bb4f9536888b1526db02a7677a4788f48ebe7eab7acf9015599170fd7d"
        }
      ],
      "purl": "pkg:npm/postcss-focus-within@5.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-focus-within/-/postcss-focus-within-5.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-focus-within@5.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-focus-within/-/postcss-focus-within-5.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-font-variant",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5f9a405a0802c3ef608ad9af62e3af2603ffadafdff5701c5144c5ce51a66a3b8de858f4798a67323e35f0bafecf5db0a27789dd94fe735a189d41555ade198"
        }
      ],
      "purl": "pkg:npm/postcss-font-variant@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-font-variant/-/postcss-font-variant-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-font-variant@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-font-variant/-/postcss-font-variant-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-gap-properties",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "acf3d944b3e610a80b93f2a55cca9168d9184d4a44ed80be6ce21014de7172ed55a75d58e1f6885efebf2697ede8532797a611c59a83646d2a40e5bcd2cb73c5"
        }
      ],
      "purl": "pkg:npm/postcss-gap-properties@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-gap-properties/-/postcss-gap-properties-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-gap-properties@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-gap-properties/-/postcss-gap-properties-3.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-image-set-function",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29f742eaf839dc60bebcf776f87633b19ea86e63ea3a4e87634f64b6d535f7e1a3d670b74b75c15445c31f1921c53a21819ab36d46fde1b297bca0e7616066fc"
        }
      ],
      "purl": "pkg:npm/postcss-image-set-function@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-image-set-function/-/postcss-image-set-function-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-image-set-function@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-image-set-function/-/postcss-image-set-function-4.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-initial",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2e783eeb3ea5fc3e7d712488dacb4019788b83a05f95f95bccb7fb8e9e7fb87b350a85933f36890378fe83c0c372228601cae37ff782109ede4512468de7dc5"
        }
      ],
      "purl": "pkg:npm/postcss-initial@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-initial/-/postcss-initial-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-initial@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-initial/-/postcss-initial-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-lab-function",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65bd443bd0c661f6b708ff0b84834709c4d30932c8f91dedec05f698ab03cdd81543f1a40a91ce4e03abe87047b253fb5c37556ea8075b9bef44f31d540350f3"
        }
      ],
      "purl": "pkg:npm/postcss-lab-function@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-lab-function/-/postcss-lab-function-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-lab-function@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-lab-function/-/postcss-lab-function-4.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-logical",
      "version": "5.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4475f1a6509e2e1f558e29ef32b64e36aee29b8c23586951240aa60152d7c99697c1f0d63fbdffa2ae0d748a7e399c21414323d338ea0df339163eea6f2f81e2"
        }
      ],
      "purl": "pkg:npm/postcss-logical@5.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-logical/-/postcss-logical-5.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-logical@5.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-logical/-/postcss-logical-5.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-media-minmax",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c8352f15ff50745653b82520d20d2e3521d5949e57d654b30d98cf4856a2096be382cbeef2f115c6d6a13eb2cc8a72031041a7c7a7017ba8aa771e585b3d3cc1"
        }
      ],
      "purl": "pkg:npm/postcss-media-minmax@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-media-minmax/-/postcss-media-minmax-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-media-minmax@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-media-minmax/-/postcss-media-minmax-5.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-nesting",
      "version": "10.1.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96a77b2d70aad2059cd30297b68283aeee701143639b73abc8b54d459f0e9d6f249ba7d2354b85ae31215379e49715c4da3bdde2aae8c79eba69c821fb142df3"
        }
      ],
      "purl": "pkg:npm/postcss-nesting@10.1.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-nesting/-/postcss-nesting-10.1.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-nesting@10.1.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-nesting/-/postcss-nesting-10.1.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-opacity-percentage",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97251f17b9a21bec9ec19f04024f57501225ac7c9413a7e28e77acbb3f8c8f9ceb207204c3a29c21948e93f7a554cab32ef44499707cdd98bfe50a4d458778ef"
        }
      ],
      "purl": "pkg:npm/postcss-opacity-percentage@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-opacity-percentage/-/postcss-opacity-percentage-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-opacity-percentage@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-opacity-percentage/-/postcss-opacity-percentage-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-overflow-shorthand",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b1670a16ba9f4a5f341e788c6d80e722434d2d0ed9f295822524104e0ea9204bf3d4da3212b9638bfe660b1e665bf5985988268d2ac09188ba76d9d654b4db2"
        }
      ],
      "purl": "pkg:npm/postcss-overflow-shorthand@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-overflow-shorthand/-/postcss-overflow-shorthand-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-overflow-shorthand@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-overflow-shorthand/-/postcss-overflow-shorthand-3.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-page-break",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d491aef280a35572daf6af6b153a3831b79e03914c7b4d3ff42ee5378bdaeb4e9175bf879315ed5ec9840eb22b690d757c6cff5af2966bc80cb822a4ad7a53b1"
        }
      ],
      "purl": "pkg:npm/postcss-page-break@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-page-break/-/postcss-page-break-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-page-break@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-page-break/-/postcss-page-break-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-place",
      "version": "7.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32b80a7a28aee4e0bf4c44d03b8e645779e9463385c441ed86ca86b64877235acf6d949b5c60ff959562f63d7771887e340f0f2003f293ab068d3f506d1caf4a"
        }
      ],
      "purl": "pkg:npm/postcss-place@7.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-place/-/postcss-place-7.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-place@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-place/-/postcss-place-7.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-pseudo-class-any-link",
      "version": "7.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d218a19273015369a57c0b28b6ed6f457a05f79776fbb66371ba3c66ca423f8f7fbe701022abc7d350053764ad2cd9a9de3764fc71352f29d35e773a7724810"
        }
      ],
      "purl": "pkg:npm/postcss-pseudo-class-any-link@7.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-pseudo-class-any-link/-/postcss-pseudo-class-any-link-7.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-pseudo-class-any-link@7.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-pseudo-class-any-link/-/postcss-pseudo-class-any-link-7.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-replace-overflow-wrap",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a617b4813e9853e203cf70a65ceda0e4c1e1e228410ef1c95afc68dc04af9c90ac6266c948bb70b8182456dc335f2f4a3bc96ee4310bbdc656759174572d7b7"
        }
      ],
      "purl": "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-replace-overflow-wrap/-/postcss-replace-overflow-wrap-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-replace-overflow-wrap/-/postcss-replace-overflow-wrap-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-not",
      "version": "6.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bf1c8fd535ddd5f5ed5638b0b026c7fd9de3c1457a9c1ad5626dc27d16c568d1a81f0c47ec2d2945b7de1a623637e7050d71d1b42abbddca312bec8b79d302d"
        }
      ],
      "purl": "pkg:npm/postcss-selector-not@6.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-selector-not/-/postcss-selector-not-6.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-not@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-selector-not/-/postcss-selector-not-6.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vitest",
      "version": "0.15.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70c69bb94aaefa734769f91d37b1fc676d3e5194ebad47ea8c6c00a0bc14c2ba85196073de05f0c677636cb7fa9a0485b3d945fc95a329e34cd425cac2d936eb"
        }
      ],
      "purl": "pkg:npm/vitest@0.15.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vitest/-/vitest-0.15.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vitest@0.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vitest/-/vitest-0.15.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-ts/node_modules/.bin/vitest"
        },
        {
          "name": "cdx:npm:bin",
          "value": "vitest"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/packages/hydrogen/test/fixtures/demo-store-js/node_modules/.bin/vitest"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "chai",
      "version": "4.3.1",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff33cca83933499f2ddd5b7139ae0a3eaeeecf35bdefc33d4ef87e8fb1872aea3a93a1932f13c9e09e601397237c9dbaa675ecb743791dac7c4abd13d8c8bdcd"
        }
      ],
      "purl": "pkg:npm/%40types/chai@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/chai/-/chai-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/chai@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/chai/-/chai-4.3.1.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/chai"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@types",
      "name": "chai-subset",
      "version": "1.3.3",
      "scope": "excluded",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7eb05e722b2b346cfe1784fa6dc73e34b7a895f8a88e1e45c56da496eebaf7ef01011b7242fd82fc690d5ba154a1d55ee01ae818c3ffc0447f60319ceeb12597"
        }
      ],
      "purl": "pkg:npm/%40types/chai-subset@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@types/chai-subset/-/chai-subset-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/chai-subset@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@types/chai-subset/-/chai-subset-1.3.3.tgz"
        },
        {
          "name": "LocalNodeModulesPath",
          "value": "node_modules/@types/chai-subset"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chai",
      "version": "4.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6db729dd87c7094ccc3af2aab33b5ccdead5801292b048a30b248d9471db5f7546d67b24bea8f3e517eca35806c03eb0ea8395dde23ad292ae30e579315ee9dd"
        }
      ],
      "purl": "pkg:npm/chai@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chai/-/chai-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chai@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chai/-/chai-4.3.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "assertion-error",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e0b1a35dbb3fa776f1b216ddee4ae5aabf2e250a72098a8beda2e40de4964738a092d90ba111d6dc407161564b33d8dd94f615c9a3ca1d1bb113c969447ae0f"
        }
      ],
      "purl": "pkg:npm/assertion-error@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assertion-error@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "check-error",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06b807a56f4d511420ce83728dfab45aee9514ee83ec864498935db6036aa73186f11b8d147b768d0c56940b381cc7b5d7d721067bfedf8b32119b5ce8884bb4"
        }
      ],
      "purl": "pkg:npm/check-error@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/check-error/-/check-error-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/check-error@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/check-error/-/check-error-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-eql",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f9078843237966e3bedd49390d887aff578a3b49b462624518d9851c6002a5fd4294bd679a557fa7880d81b976a491b18176f87daaa8e9413e33900210cc9573"
        }
      ],
      "purl": "pkg:npm/deep-eql@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-eql/-/deep-eql-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-eql@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-eql/-/deep-eql-3.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-detect",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1faff9881f57653bec7b4e570ccbe6c80ea28fb30ffbd2d5727875bbf3b828423866a9a65ed74bb02ee8ee6caf6af4b83a162868d4a50a0d8cf467b93b839fe"
        }
      ],
      "purl": "pkg:npm/type-detect@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-detect@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-detect/-/type-detect-4.0.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-func-name",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e6d22c58b5a499fd5ec2f0526bb5922e04123e89280bfb502af36cd2bbc550341e12dc693c7bb42cdd5c010c902199165c16a925ded42edfa83f1688792398a"
        }
      ],
      "purl": "pkg:npm/get-func-name@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-func-name@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loupe",
      "version": "2.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3af29f8020b635d6f2e9a49344497968208f4cd2339437d066f671354ac1ae284384bdf172b61e8136e58661220ab83690a433e17b0521a7a6139045e326d269"
        }
      ],
      "purl": "pkg:npm/loupe@2.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loupe/-/loupe-2.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loupe@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loupe/-/loupe-2.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pathval",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e9eb31aaa537444dd47ade57a12583de20eaa988d04db5cec1a5648bace8deed4688b04e5a63ddabfc0ba7400eebb17bdeb7796b277267657dbd50f4ca5f229"
        }
      ],
      "purl": "pkg:npm/pathval@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pathval/-/pathval-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pathval@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pathval/-/pathval-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "local-pkg",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94bf3bcad2063f6154e4f5b0343a34c375a1228da0a29200c4f83d4710d817b9b8aebe5a86e6713f6db19c91c8bda2d37b867d3fab8a298d941e2c32078a5caf"
        }
      ],
      "purl": "pkg:npm/local-pkg@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/local-pkg/-/local-pkg-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/local-pkg@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/local-pkg/-/local-pkg-0.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinypool",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d887dc421ec23f8e971961866ddc8ee298dc2aab2656a1403dc5df3f170f5e6396b7d7189133fd1dc0e61a0b1f8a3628004738cfda9ca4cfc1681cf8e98f7f09"
        }
      ],
      "purl": "pkg:npm/tinypool@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinypool/-/tinypool-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinypool@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinypool/-/tinypool-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinyspy",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81189447c7ee8547f45bd973a233dfd4dd5eb89600df421279b49f81c6bccfbe853af5ed557a9de688c421a28b59b0d0840682de26f16488ea6f28b8c9b8dc4f"
        }
      ],
      "purl": "pkg:npm/tinyspy@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinyspy/-/tinyspy-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinyspy@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-ts/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinyspy/-/tinyspy-0.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/fixtures/demo-store-js/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/fixtures/demo-store-js/package-lock.json"
              }
            ],
            "concludedValue": "test/fixtures/demo-store-js/package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/js-tokens@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loose-envify@1.4.0",
      "dependsOn": [
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/react@18.2.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/scheduler@0.23.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@18.2.0",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/scheduler@0.23.0"
      ]
    },
    {
      "ref": "pkg:npm/esbuild-android-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-android-arm64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-darwin-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-darwin-arm64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-freebsd-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-freebsd-arm64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-32@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-arm@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-arm64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-mips64le@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-ppc64le@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-riscv64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-linux-s390x@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-netbsd-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-openbsd-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-sunos-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-windows-32@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-windows-64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild-windows-arm64@0.14.48",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esbuild@0.14.48",
      "dependsOn": [
        "pkg:npm/esbuild-android-64@0.14.48",
        "pkg:npm/esbuild-android-arm64@0.14.48",
        "pkg:npm/esbuild-darwin-64@0.14.48",
        "pkg:npm/esbuild-darwin-arm64@0.14.48",
        "pkg:npm/esbuild-freebsd-64@0.14.48",
        "pkg:npm/esbuild-freebsd-arm64@0.14.48",
        "pkg:npm/esbuild-linux-32@0.14.48",
        "pkg:npm/esbuild-linux-64@0.14.48",
        "pkg:npm/esbuild-linux-arm64@0.14.48",
        "pkg:npm/esbuild-linux-arm@0.14.48",
        "pkg:npm/esbuild-linux-mips64le@0.14.48",
        "pkg:npm/esbuild-linux-ppc64le@0.14.48",
        "pkg:npm/esbuild-linux-riscv64@0.14.48",
        "pkg:npm/esbuild-linux-s390x@0.14.48",
        "pkg:npm/esbuild-netbsd-64@0.14.48",
        "pkg:npm/esbuild-openbsd-64@0.14.48",
        "pkg:npm/esbuild-sunos-64@0.14.48",
        "pkg:npm/esbuild-windows-32@0.14.48",
        "pkg:npm/esbuild-windows-64@0.14.48",
        "pkg:npm/esbuild-windows-arm64@0.14.48"
      ]
    },
    {
      "ref": "pkg:npm/nanoid@3.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picocolors@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-js@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss@8.4.14",
      "dependsOn": [
        "pkg:npm/nanoid@3.3.4",
        "pkg:npm/picocolors@1.0.0",
        "pkg:npm/source-map-js@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.3",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-core-module@2.9.0",
      "dependsOn": [
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.22.1",
      "dependsOn": [
        "pkg:npm/is-core-module@2.9.0",
        "pkg:npm/path-parse@1.0.7",
        "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup@2.75.7",
      "dependsOn": [
        "pkg:npm/fsevents@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/vite@2.9.13",
      "dependsOn": [
        "pkg:npm/esbuild@0.14.48",
        "pkg:npm/fsevents@2.3.2",
        "pkg:npm/postcss@8.4.14",
        "pkg:npm/resolve@1.22.1",
        "pkg:npm/rollup@2.75.7"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.1.1",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.14",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.0.8",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@ampproject/remapping@2.2.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.1.1",
        "pkg:npm/@jridgewell/trace-mapping@0.3.14"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-identifier@7.18.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.3",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.1",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.3"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@5.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.4.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@5.5.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/highlight@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.18.6",
        "pkg:npm/chalk@2.4.2",
        "pkg:npm/js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/code-frame@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/highlight@7.18.6"
      ]
    },
    {
      "ref": "pkg:npm/to-fast-properties@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/types@7.18.7",
      "dependsOn": [
        "pkg:npm/@babel/helper-validator-identifier@7.18.6",
        "pkg:npm/to-fast-properties@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
        "pkg:npm/@jridgewell/trace-mapping@0.3.14"
      ]
    },
    {
      "ref": "pkg:npm/jsesc@2.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/generator@7.18.7",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.7",
        "pkg:npm/@jridgewell/gen-mapping@0.3.2",
        "pkg:npm/jsesc@2.5.2"
      ]
    },
    {
      "ref": "pkg:npm/@babel/compat-data@7.18.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-validator-option@7.18.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30001361",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/electron-to-chromium@1.4.177",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-releases@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escalade@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/update-browserslist-db@1.0.4",
      "dependsOn": [
        "pkg:npm/browserslist@4.21.1",
        "pkg:npm/escalade@3.1.1",
        "pkg:npm/picocolors@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/browserslist@4.21.1",
      "dependsOn": [
        "pkg:npm/caniuse-lite@1.0.30001361",
        "pkg:npm/electron-to-chromium@1.4.177",
        "pkg:npm/node-releases@2.0.5",
        "pkg:npm/update-browserslist-db@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/semver@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-compilation-targets@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/compat-data@7.18.6",
        "pkg:npm/@babel/core@7.18.6",
        "pkg:npm/@babel/helper-validator-option@7.18.6",
        "pkg:npm/browserslist@4.21.1",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-environment-visitor@7.18.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/helper-module-imports@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-simple-access@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-split-export-declaration@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/parser@7.18.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/template@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.18.6",
        "pkg:npm/@babel/parser@7.18.6",
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-function-name@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/template@7.18.6",
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-hoist-variables@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/ms@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@4.3.4",
      "dependsOn": [
        "pkg:npm/ms@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/globals@11.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/traverse@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/code-frame@7.18.6",
        "pkg:npm/@babel/generator@7.18.7",
        "pkg:npm/@babel/helper-environment-visitor@7.18.6",
        "pkg:npm/@babel/helper-function-name@7.18.6",
        "pkg:npm/@babel/helper-hoist-variables@7.18.6",
        "pkg:npm/@babel/helper-split-export-declaration@7.18.6",
        "pkg:npm/@babel/parser@7.18.6",
        "pkg:npm/@babel/types@7.18.7",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/globals@11.12.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-module-transforms@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/helper-environment-visitor@7.18.6",
        "pkg:npm/@babel/helper-module-imports@7.18.6",
        "pkg:npm/@babel/helper-simple-access@7.18.6",
        "pkg:npm/@babel/helper-split-export-declaration@7.18.6",
        "pkg:npm/@babel/helper-validator-identifier@7.18.6",
        "pkg:npm/@babel/template@7.18.6",
        "pkg:npm/@babel/traverse@7.18.6",
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helpers@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/template@7.18.6",
        "pkg:npm/@babel/traverse@7.18.6",
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@1.8.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/gensync@1.0.0-beta.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/core@7.18.6",
      "dependsOn": [
        "pkg:npm/@ampproject/remapping@2.2.0",
        "pkg:npm/@babel/code-frame@7.18.6",
        "pkg:npm/@babel/generator@7.18.7",
        "pkg:npm/@babel/helper-compilation-targets@7.18.6",
        "pkg:npm/@babel/helper-module-transforms@7.18.6",
        "pkg:npm/@babel/helpers@7.18.6",
        "pkg:npm/@babel/parser@7.18.6",
        "pkg:npm/@babel/template@7.18.6",
        "pkg:npm/@babel/traverse@7.18.6",
        "pkg:npm/@babel/types@7.18.7",
        "pkg:npm/convert-source-map@1.8.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/gensync@1.0.0-beta.2",
        "pkg:npm/json5@2.2.1",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-annotate-as-pure@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/helper-plugin-utils@7.18.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/plugin-syntax-jsx@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.6",
        "pkg:npm/@babel/helper-plugin-utils@7.18.6"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.6",
        "pkg:npm/@babel/helper-annotate-as-pure@7.18.6",
        "pkg:npm/@babel/helper-module-imports@7.18.6",
        "pkg:npm/@babel/helper-plugin-utils@7.18.6",
        "pkg:npm/@babel/plugin-syntax-jsx@7.18.6",
        "pkg:npm/@babel/types@7.18.7"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx-development@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.6",
        "pkg:npm/@babel/plugin-transform-react-jsx@7.18.6"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx-self@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.6",
        "pkg:npm/@babel/helper-plugin-utils@7.18.6"
      ]
    },
    {
      "ref": "pkg:npm/@babel/plugin-transform-react-jsx-source@7.18.6",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.6",
        "pkg:npm/@babel/helper-plugin-utils@7.18.6"
      ]
    },
    {
      "ref": "pkg:npm/estree-walker@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/picomatch@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/pluginutils@4.2.1",
      "dependsOn": [
        "pkg:npm/estree-walker@2.0.2",
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/react-refresh@0.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@vitejs/plugin-react@1.3.2",
      "dependsOn": [
        "pkg:npm/@babel/core@7.18.6",
        "pkg:npm/@babel/plugin-transform-react-jsx-development@7.18.6",
        "pkg:npm/@babel/plugin-transform-react-jsx-self@7.18.6",
        "pkg:npm/@babel/plugin-transform-react-jsx-source@7.18.6",
        "pkg:npm/@babel/plugin-transform-react-jsx@7.18.6",
        "pkg:npm/@rollup/pluginutils@4.2.1",
        "pkg:npm/react-refresh@0.13.0",
        "pkg:npm/resolve@1.22.1"
      ]
    },
    {
      "ref": "pkg:npm/event-target-shim@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/abort-controller@3.0.0",
      "dependsOn": [
        "pkg:npm/event-target-shim@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/bytes@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/depd@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toidentifier@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@2.0.0",
      "dependsOn": [
        "pkg:npm/depd@2.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/setprototypeof@1.2.0",
        "pkg:npm/statuses@2.0.1",
        "pkg:npm/toidentifier@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/safer-buffer@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.24",
      "dependsOn": [
        "pkg:npm/safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.4.1",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-symbols@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-intrinsic@1.1.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has-symbols@1.0.3",
        "pkg:npm/has@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/call-bind@1.0.2",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/get-intrinsic@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/object-inspect@1.12.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/side-channel@1.0.4",
      "dependsOn": [
        "pkg:npm/call-bind@1.0.2",
        "pkg:npm/get-intrinsic@1.1.2",
        "pkg:npm/object-inspect@1.12.2"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.10.3",
      "dependsOn": [
        "pkg:npm/side-channel@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.5.1",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.52.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.35",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/type-is@1.6.18",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.20.0",
      "dependsOn": [
        "pkg:npm/bytes@3.1.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/qs@6.10.3",
        "pkg:npm/raw-body@2.5.1",
        "pkg:npm/type-is@1.6.18",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.8",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.35",
        "pkg:npm/negotiator@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/bytes@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compressible@2.0.18",
      "dependsOn": [
        "pkg:npm/mime-db@1.52.0"
      ]
    },
    {
      "ref": "pkg:npm/on-headers@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.7.4",
      "dependsOn": [
        "pkg:npm/accepts@1.3.8",
        "pkg:npm/bytes@3.0.0",
        "pkg:npm/compressible@2.0.18",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/on-headers@1.0.2",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.3.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/parseurl@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.1.2",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/statuses@1.5.0",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@3.7.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/finalhandler@1.1.2",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/utils-merge@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es-module-lexer@0.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/queue-microtask@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/run-parallel@1.2.0",
      "dependsOn": [
        "pkg:npm/queue-microtask@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/run-parallel@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/reusify@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fastq@1.13.0",
      "dependsOn": [
        "pkg:npm/reusify@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.scandir@2.1.5",
        "pkg:npm/fastq@1.13.0"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@4.0.3",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@5.1.2",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/merge2@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-regex-range@5.0.1",
      "dependsOn": [
        "pkg:npm/is-number@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fill-range@7.0.1",
      "dependsOn": [
        "pkg:npm/to-regex-range@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/braces@3.0.2",
      "dependsOn": [
        "pkg:npm/fill-range@7.0.1"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@4.0.5",
      "dependsOn": [
        "pkg:npm/braces@3.0.2",
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/fast-glob@3.2.11",
      "dependsOn": [
        "pkg:npm/@nodelib/fs.stat@2.0.5",
        "pkg:npm/@nodelib/fs.walk@1.2.8",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/micromatch@4.0.5"
      ]
    },
    {
      "ref": "pkg:npm/graphql@16.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graphql-tag@2.12.6",
      "dependsOn": [
        "pkg:npm/graphql@16.5.0",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.13.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@babel/runtime@7.18.6",
      "dependsOn": [
        "pkg:npm/regenerator-runtime@0.13.9"
      ]
    },
    {
      "ref": "pkg:npm/history@5.3.0",
      "dependsOn": [
        "pkg:npm/@babel/runtime@7.18.6"
      ]
    },
    {
      "ref": "pkg:npm/kolorist@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sourcemap-codec@1.4.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/magic-string@0.26.2",
      "dependsOn": [
        "pkg:npm/sourcemap-codec@1.4.8"
      ]
    },
    {
      "ref": "pkg:npm/tr46@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url@5.0.0",
      "dependsOn": [
        "pkg:npm/tr46@0.0.3",
        "pkg:npm/webidl-conversions@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/node-fetch@2.6.7",
      "dependsOn": [
        "pkg:npm/whatwg-url@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-to-regexp@6.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-error-boundary@3.1.4",
      "dependsOn": [
        "pkg:npm/@babel/runtime@7.18.6",
        "pkg:npm/react@18.2.0"
      ]
    },
    {
      "ref": "pkg:npm/invariant@2.2.4",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-is@16.13.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prop-types@15.8.1",
      "dependsOn": [
        "pkg:npm/loose-envify@1.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/react-is@16.13.1"
      ]
    },
    {
      "ref": "pkg:npm/react-fast-compare@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shallowequal@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-helmet-async@1.3.0",
      "dependsOn": [
        "pkg:npm/@babel/runtime@7.18.6",
        "pkg:npm/invariant@2.2.4",
        "pkg:npm/prop-types@15.8.1",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react-fast-compare@3.2.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/shallowequal@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fresh@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/range-parser@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.18.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@2.0.0",
        "pkg:npm/destroy@1.2.0",
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@2.0.0",
        "pkg:npm/mime@1.6.0",
        "pkg:npm/ms@2.1.3",
        "pkg:npm/on-finished@2.4.1",
        "pkg:npm/range-parser@1.2.1",
        "pkg:npm/statuses@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.15.0",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.2",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.3",
        "pkg:npm/send@0.18.0"
      ]
    },
    {
      "ref": "pkg:npm/set-cookie-parser@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/undici@5.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uuid@8.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@polka/url@1.0.0-next.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mrmime@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/totalist@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sirv@2.0.2",
      "dependsOn": [
        "pkg:npm/@polka/url@1.0.0-next.21",
        "pkg:npm/mrmime@1.0.1",
        "pkg:npm/totalist@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ufo@0.7.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vite-plugin-inspect@0.3.15",
      "dependsOn": [
        "pkg:npm/@rollup/pluginutils@4.2.1",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/kolorist@1.5.1",
        "pkg:npm/sirv@2.0.2",
        "pkg:npm/ufo@0.7.11",
        "pkg:npm/vite@2.9.13"
      ]
    },
    {
      "ref": "pkg:npm/web-streams-polyfill@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regexparam@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/worktop@0.7.3",
      "dependsOn": [
        "pkg:npm/regexparam@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@shopify/hydrogen@1.0.2",
      "dependsOn": [
        "pkg:npm/@vitejs/plugin-react@1.3.2",
        "pkg:npm/abort-controller@3.0.0",
        "pkg:npm/body-parser@1.20.0",
        "pkg:npm/compression@1.7.4",
        "pkg:npm/connect@3.7.0",
        "pkg:npm/es-module-lexer@0.10.5",
        "pkg:npm/fast-glob@3.2.11",
        "pkg:npm/graphql-tag@2.12.6",
        "pkg:npm/graphql@16.5.0",
        "pkg:npm/history@5.3.0",
        "pkg:npm/kolorist@1.5.1",
        "pkg:npm/magic-string@0.26.2",
        "pkg:npm/node-fetch@2.6.7",
        "pkg:npm/path-to-regexp@6.2.1",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react-error-boundary@3.1.4",
        "pkg:npm/react-helmet-async@1.3.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/serve-static@1.15.0",
        "pkg:npm/set-cookie-parser@2.5.0",
        "pkg:npm/undici@5.6.0",
        "pkg:npm/uuid@8.3.2",
        "pkg:npm/vite-plugin-inspect@0.3.15",
        "pkg:npm/vite@2.9.13",
        "pkg:npm/web-streams-polyfill@3.2.1",
        "pkg:npm/worktop@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/@bugsnag/cuid@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bugsnag/safe-json-stringify@6.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stackframe@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-stack-parser@2.1.4",
      "dependsOn": [
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/iserror@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stack-generator@2.0.10",
      "dependsOn": [
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/@bugsnag/core@7.17.0",
      "dependsOn": [
        "pkg:npm/@bugsnag/cuid@3.0.0",
        "pkg:npm/@bugsnag/safe-json-stringify@6.0.0",
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/iserror@0.0.2",
        "pkg:npm/stack-generator@2.0.10"
      ]
    },
    {
      "ref": "pkg:npm/@bugsnag/browser@7.17.0",
      "dependsOn": [
        "pkg:npm/@bugsnag/core@7.17.0"
      ]
    },
    {
      "ref": "pkg:npm/byline@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.4",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pump@3.0.0",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/@bugsnag/node@7.17.0",
      "dependsOn": [
        "pkg:npm/@bugsnag/core@7.17.0",
        "pkg:npm/byline@5.0.0",
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/iserror@0.0.2",
        "pkg:npm/pump@3.0.0",
        "pkg:npm/stack-generator@2.0.10"
      ]
    },
    {
      "ref": "pkg:npm/@bugsnag/js@7.17.0",
      "dependsOn": [
        "pkg:npm/@bugsnag/browser@7.17.0",
        "pkg:npm/@bugsnag/node@7.17.0"
      ]
    },
    {
      "ref": "pkg:npm/@oclif/linewrap@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oclif/screen@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.21.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-escapes@4.3.2",
      "dependsOn": [
        "pkg:npm/type-fest@0.21.3"
      ]
    },
    {
      "ref": "pkg:npm/color-name@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@2.0.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@4.3.0",
      "dependsOn": [
        "pkg:npm/color-convert@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ansicolors@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/redeyed@2.1.1",
      "dependsOn": [
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cardinal@2.1.1",
      "dependsOn": [
        "pkg:npm/ansicolors@0.3.2",
        "pkg:npm/redeyed@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@7.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@4.1.2",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/escape-string-regexp@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clean-stack@3.0.1",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/emoji-regex@8.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@6.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@4.2.3",
      "dependsOn": [
        "pkg:npm/emoji-regex@8.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cli-progress@3.11.2",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/async@3.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@2.0.1",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@5.1.0",
      "dependsOn": [
        "pkg:npm/brace-expansion@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/filelist@1.0.4",
      "dependsOn": [
        "pkg:npm/minimatch@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.11",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.1.2",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.11"
      ]
    },
    {
      "ref": "pkg:npm/jake@10.8.5",
      "dependsOn": [
        "pkg:npm/async@3.2.4",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/filelist@1.0.4",
        "pkg:npm/minimatch@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/ejs@3.1.8",
      "dependsOn": [
        "pkg:npm/jake@10.8.5"
      ]
    },
    {
      "ref": "pkg:npm/at-least-node@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@6.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@9.1.0",
      "dependsOn": [
        "pkg:npm/at-least-node@1.0.0",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/get-package-type@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-type@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dir-glob@3.0.1",
      "dependsOn": [
        "pkg:npm/path-type@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ignore@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slash@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globby@11.1.0",
      "dependsOn": [
        "pkg:npm/array-union@2.1.0",
        "pkg:npm/dir-glob@3.0.1",
        "pkg:npm/fast-glob@3.2.11",
        "pkg:npm/ignore@5.2.0",
        "pkg:npm/merge2@1.4.1",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hyperlinker@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/indent-string@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-docker@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-wsl@2.2.0",
      "dependsOn": [
        "pkg:npm/is-docker@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.10",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/js-yaml@3.14.1",
      "dependsOn": [
        "pkg:npm/argparse@1.0.10",
        "pkg:npm/esprima@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/natural-orderby@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-treeify@1.1.33",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-escapes@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nice-try@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@1.2.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.3.1",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@6.0.5",
      "dependsOn": [
        "pkg:npm/nice-try@1.0.5",
        "pkg:npm/path-key@2.0.1",
        "pkg:npm/semver@5.7.1",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/password-prompt@1.1.2",
      "dependsOn": [
        "pkg:npm/ansi-escapes@3.2.0",
        "pkg:npm/cross-spawn@6.0.5"
      ]
    },
    {
      "ref": "pkg:npm/yallist@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@6.0.0",
      "dependsOn": [
        "pkg:npm/yallist@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@7.3.7",
      "dependsOn": [
        "pkg:npm/lru-cache@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@8.1.1",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/supports-hyperlinks@2.2.0",
      "dependsOn": [
        "pkg:npm/has-flag@4.0.0",
        "pkg:npm/supports-color@7.2.0"
      ]
    },
    {
      "ref": "pkg:npm/widest-line@3.1.0",
      "dependsOn": [
        "pkg:npm/string-width@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@7.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@oclif/core@1.9.5",
      "dependsOn": [
        "pkg:npm/@oclif/linewrap@1.0.0",
        "pkg:npm/@oclif/screen@3.0.2",
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/cardinal@2.1.1",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/clean-stack@3.0.1",
        "pkg:npm/cli-progress@3.11.2",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/ejs@3.1.8",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/get-package-type@0.1.0",
        "pkg:npm/globby@11.1.0",
        "pkg:npm/hyperlinker@1.0.0",
        "pkg:npm/indent-string@4.0.0",
        "pkg:npm/is-wsl@2.2.0",
        "pkg:npm/js-yaml@3.14.1",
        "pkg:npm/natural-orderby@2.0.3",
        "pkg:npm/object-treeify@1.1.33",
        "pkg:npm/password-prompt@1.1.2",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/supports-color@8.1.1",
        "pkg:npm/supports-hyperlinks@2.2.0",
        "pkg:npm/tslib@2.4.0",
        "pkg:npm/widest-line@3.1.0",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/@oclif/plugin-help@5.1.12",
      "dependsOn": [
        "pkg:npm/@oclif/core@1.9.5"
      ]
    },
    {
      "ref": "pkg:npm/@oclif/color@1.0.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/supports-color@8.1.1",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/is-retry-allowed@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.2",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/json-parse-better-errors@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-json@4.0.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.2",
        "pkg:npm/json-parse-better-errors@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/http-call@5.3.0",
      "dependsOn": [
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/is-retry-allowed@1.2.0",
        "pkg:npm/is-stream@2.0.1",
        "pkg:npm/parse-json@4.0.0",
        "pkg:npm/tunnel-agent@0.6.0"
      ]
    },
    {
      "ref": "pkg:npm/pify@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/load-json-file@5.3.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/parse-json@4.0.0",
        "pkg:npm/pify@4.0.1",
        "pkg:npm/strip-bom@3.0.0",
        "pkg:npm/type-fest@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/path-key@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@4.0.1",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/yarn@1.22.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@oclif/plugin-plugins@2.1.0",
      "dependsOn": [
        "pkg:npm/@oclif/color@1.0.1",
        "pkg:npm/@oclif/core@1.9.5",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/fs-extra@9.1.0",
        "pkg:npm/http-call@5.3.0",
        "pkg:npm/load-json-file@5.3.0",
        "pkg:npm/npm-run-path@4.0.1",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/tslib@2.4.0",
        "pkg:npm/yarn@1.22.19"
      ]
    },
    {
      "ref": "pkg:npm/@iarna/toml@2.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lower-case@2.0.2",
      "dependsOn": [
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/no-case@3.0.4",
      "dependsOn": [
        "pkg:npm/lower-case@2.0.2",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/pascal-case@3.1.2",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/camel-case@4.1.2",
      "dependsOn": [
        "pkg:npm/pascal-case@3.1.2",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/upper-case-first@2.0.2",
      "dependsOn": [
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/capital-case@1.0.4",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.4.0",
        "pkg:npm/upper-case-first@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/upper-case@2.0.2",
      "dependsOn": [
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/constant-case@3.0.4",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.4.0",
        "pkg:npm/upper-case@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/dot-case@3.0.4",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/header-case@2.0.4",
      "dependsOn": [
        "pkg:npm/capital-case@1.0.4",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/param-case@3.0.4",
      "dependsOn": [
        "pkg:npm/dot-case@3.0.4",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/path-case@3.0.4",
      "dependsOn": [
        "pkg:npm/dot-case@3.0.4",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/sentence-case@3.0.4",
      "dependsOn": [
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/tslib@2.4.0",
        "pkg:npm/upper-case-first@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/snake-case@3.0.4",
      "dependsOn": [
        "pkg:npm/dot-case@3.0.4",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/change-case@4.1.2",
      "dependsOn": [
        "pkg:npm/camel-case@4.1.2",
        "pkg:npm/capital-case@1.0.4",
        "pkg:npm/constant-case@3.0.4",
        "pkg:npm/dot-case@3.0.4",
        "pkg:npm/header-case@2.0.4",
        "pkg:npm/no-case@3.0.4",
        "pkg:npm/param-case@3.0.4",
        "pkg:npm/pascal-case@3.1.2",
        "pkg:npm/path-case@3.0.4",
        "pkg:npm/sentence-case@3.0.4",
        "pkg:npm/snake-case@3.0.4",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/color-json@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commondir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-deep-equal@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-from-string@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uri-js@4.4.1",
      "dependsOn": [
        "pkg:npm/punycode@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv@8.11.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/json-schema-traverse@1.0.0",
        "pkg:npm/require-from-string@2.0.2",
        "pkg:npm/uri-js@4.4.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv-formats@2.1.1",
      "dependsOn": [
        "pkg:npm/ajv@8.11.0"
      ]
    },
    {
      "ref": "pkg:npm/atomically@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimic-fn@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debounce-fn@4.0.0",
      "dependsOn": [
        "pkg:npm/mimic-fn@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-obj@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dot-prop@6.0.1",
      "dependsOn": [
        "pkg:npm/is-obj@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/env-paths@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-typed@7.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimic-fn@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@5.1.2",
      "dependsOn": [
        "pkg:npm/mimic-fn@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/p-try@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@2.3.0",
      "dependsOn": [
        "pkg:npm/p-try@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@3.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-path@3.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@3.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@3.0.0",
      "dependsOn": [
        "pkg:npm/locate-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-up@3.1.0",
      "dependsOn": [
        "pkg:npm/find-up@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/conf@10.1.2",
      "dependsOn": [
        "pkg:npm/ajv-formats@2.1.1",
        "pkg:npm/ajv@8.11.0",
        "pkg:npm/atomically@1.7.0",
        "pkg:npm/debounce-fn@4.0.0",
        "pkg:npm/dot-prop@6.0.1",
        "pkg:npm/env-paths@2.2.1",
        "pkg:npm/json-schema-typed@7.0.3",
        "pkg:npm/onetime@5.1.2",
        "pkg:npm/pkg-up@3.1.0",
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/cross-zip@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-cwd@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-inside@3.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clean-stack@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aggregate-error@3.1.0",
      "dependsOn": [
        "pkg:npm/clean-stack@2.2.0",
        "pkg:npm/indent-string@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-map@4.0.0",
      "dependsOn": [
        "pkg:npm/aggregate-error@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.2.3",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@3.1.2",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@3.0.2",
      "dependsOn": [
        "pkg:npm/glob@7.2.3"
      ]
    },
    {
      "ref": "pkg:npm/del@6.1.1",
      "dependsOn": [
        "pkg:npm/globby@11.1.0",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/is-path-cwd@2.2.0",
        "pkg:npm/is-path-inside@3.0.3",
        "pkg:npm/p-map@4.0.0",
        "pkg:npm/rimraf@3.0.2",
        "pkg:npm/slash@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-colors@4.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enquirer@2.3.6",
      "dependsOn": [
        "pkg:npm/ansi-colors@4.1.3"
      ]
    },
    {
      "ref": "pkg:npm/env-paths@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/envfile@6.17.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@2.0.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which@2.0.2",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@7.0.3",
      "dependsOn": [
        "pkg:npm/path-key@3.1.1",
        "pkg:npm/shebang-command@2.0.0",
        "pkg:npm/which@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@6.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/human-signals@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-stream@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@5.1.0",
      "dependsOn": [
        "pkg:npm/path-key@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mimic-fn@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@6.0.0",
      "dependsOn": [
        "pkg:npm/mimic-fn@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-final-newline@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@6.1.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@7.0.3",
        "pkg:npm/get-stream@6.0.1",
        "pkg:npm/human-signals@3.0.1",
        "pkg:npm/is-stream@3.0.0",
        "pkg:npm/merge-stream@2.0.0",
        "pkg:npm/npm-run-path@5.1.0",
        "pkg:npm/onetime@6.0.0",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/strip-final-newline@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fast-uri@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@fastify/ajv-compiler@3.1.0",
      "dependsOn": [
        "pkg:npm/ajv-formats@2.1.1",
        "pkg:npm/ajv@8.11.0",
        "pkg:npm/fast-uri@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@fastify/error@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deepmerge@4.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-uri@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rfdc@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stringify@5.0.5",
      "dependsOn": [
        "pkg:npm/ajv-formats@2.1.1",
        "pkg:npm/ajv@8.11.0",
        "pkg:npm/deepmerge@4.2.2",
        "pkg:npm/fast-uri@2.1.0",
        "pkg:npm/rfdc@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@fastify/fast-json-stringify-compiler@4.0.0",
      "dependsOn": [
        "pkg:npm/fast-json-stringify@5.0.5"
      ]
    },
    {
      "ref": "pkg:npm/abstract-logging@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/archy@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/avvio@8.1.3",
      "dependsOn": [
        "pkg:npm/archy@1.0.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/fastq@1.13.0",
        "pkg:npm/queue-microtask@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/ret@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-regex2@2.0.0",
      "dependsOn": [
        "pkg:npm/ret@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/find-my-way@7.0.0",
      "dependsOn": [
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/safe-regex2@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cookie@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-warning@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/light-my-request@5.0.0",
      "dependsOn": [
        "pkg:npm/ajv@8.11.0",
        "pkg:npm/cookie@0.5.0",
        "pkg:npm/process-warning@1.0.0",
        "pkg:npm/set-cookie-parser@2.5.0"
      ]
    },
    {
      "ref": "pkg:npm/atomic-sleep@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-redact@3.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-exit-leak-free@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@4.0.0",
      "dependsOn": [
        "pkg:npm/abort-controller@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/split2@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pino-abstract-transport@1.0.0",
      "dependsOn": [
        "pkg:npm/readable-stream@4.0.0",
        "pkg:npm/split2@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pino-std-serializers@5.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-warning@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/quick-format-unescaped@4.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/real-require@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-stable-stringify@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sonic-boom@3.0.0",
      "dependsOn": [
        "pkg:npm/atomic-sleep@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/thread-stream@1.0.1",
      "dependsOn": [
        "pkg:npm/real-require@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pino@8.1.0",
      "dependsOn": [
        "pkg:npm/atomic-sleep@1.0.0",
        "pkg:npm/fast-redact@3.1.1",
        "pkg:npm/on-exit-leak-free@2.1.0",
        "pkg:npm/pino-abstract-transport@1.0.0",
        "pkg:npm/pino-std-serializers@5.6.0",
        "pkg:npm/process-warning@2.0.0",
        "pkg:npm/quick-format-unescaped@4.0.4",
        "pkg:npm/real-require@0.1.0",
        "pkg:npm/safe-stable-stringify@2.3.1",
        "pkg:npm/sonic-boom@3.0.0",
        "pkg:npm/thread-stream@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/forwarded@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.7",
      "dependsOn": [
        "pkg:npm/forwarded@0.2.0",
        "pkg:npm/ipaddr.js@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/secure-json-parse@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tiny-lru@8.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fastify@4.2.0",
      "dependsOn": [
        "pkg:npm/@fastify/ajv-compiler@3.1.0",
        "pkg:npm/@fastify/error@3.0.0",
        "pkg:npm/@fastify/fast-json-stringify-compiler@4.0.0",
        "pkg:npm/abstract-logging@2.0.1",
        "pkg:npm/avvio@8.1.3",
        "pkg:npm/find-my-way@7.0.0",
        "pkg:npm/light-my-request@5.0.0",
        "pkg:npm/pino@8.1.0",
        "pkg:npm/process-warning@2.0.0",
        "pkg:npm/proxy-addr@2.0.7",
        "pkg:npm/rfdc@1.3.0",
        "pkg:npm/secure-json-parse@2.4.0",
        "pkg:npm/semver@7.3.7",
        "pkg:npm/tiny-lru@8.0.2"
      ]
    },
    {
      "ref": "pkg:npm/yocto-queue@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-limit@4.0.0",
      "dependsOn": [
        "pkg:npm/yocto-queue@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/p-locate@6.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/locate-path@7.1.1",
      "dependsOn": [
        "pkg:npm/p-locate@6.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-up@6.3.0",
      "dependsOn": [
        "pkg:npm/locate-path@7.1.1",
        "pkg:npm/path-exists@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver-regex@4.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/find-versions@5.1.0",
      "dependsOn": [
        "pkg:npm/semver-regex@4.0.5"
      ]
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.8",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@4.0.0",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@10.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/jsonfile@6.1.0",
        "pkg:npm/universalify@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-memo@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-port-please@2.5.0",
      "dependsOn": [
        "pkg:npm/fs-memo@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-fetch@3.1.5",
      "dependsOn": [
        "pkg:npm/node-fetch@2.6.7"
      ]
    },
    {
      "ref": "pkg:npm/extract-files@9.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@3.0.1",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.8",
        "pkg:npm/mime-types@2.1.35"
      ]
    },
    {
      "ref": "pkg:npm/graphql-request@4.3.0",
      "dependsOn": [
        "pkg:npm/cross-fetch@3.1.5",
        "pkg:npm/extract-files@9.0.0",
        "pkg:npm/form-data@3.0.1",
        "pkg:npm/graphql@16.5.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/random-seed@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.defaults@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/random-seed@0.3.0",
      "dependsOn": [
        "pkg:npm/json-stringify-safe@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/haikunator@2.1.2",
      "dependsOn": [
        "pkg:npm/@types/random-seed@0.3.3",
        "pkg:npm/lodash.defaults@4.2.0",
        "pkg:npm/random-seed@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/restore-cursor@3.1.0",
      "dependsOn": [
        "pkg:npm/onetime@5.1.2",
        "pkg:npm/signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pkg:npm/cli-cursor@3.1.0",
      "dependsOn": [
        "pkg:npm/restore-cursor@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-width@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chardet@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-tmpdir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.33",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/external-editor@3.1.0",
      "dependsOn": [
        "pkg:npm/chardet@0.7.0",
        "pkg:npm/iconv-lite@0.4.24",
        "pkg:npm/tmp@0.0.33"
      ]
    },
    {
      "ref": "pkg:npm/figures@3.2.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.21",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@5.7.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.3.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@3.6.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/string_decoder@1.3.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/bl@4.1.0",
      "dependsOn": [
        "pkg:npm/buffer@5.7.1",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-spinners@2.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-interactive@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-unicode-supported@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log-symbols@4.1.0",
      "dependsOn": [
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/is-unicode-supported@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/clone@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/defaults@1.0.3",
      "dependsOn": [
        "pkg:npm/clone@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/wcwidth@1.0.1",
      "dependsOn": [
        "pkg:npm/defaults@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ora@5.4.1",
      "dependsOn": [
        "pkg:npm/bl@4.1.0",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cli-cursor@3.1.0",
        "pkg:npm/cli-spinners@2.6.1",
        "pkg:npm/is-interactive@1.0.0",
        "pkg:npm/is-unicode-supported@0.1.0",
        "pkg:npm/log-symbols@4.1.0",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/wcwidth@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/run-async@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rxjs@7.5.5",
      "dependsOn": [
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inquirer@8.2.4",
      "dependsOn": [
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/chalk@4.1.2",
        "pkg:npm/cli-cursor@3.1.0",
        "pkg:npm/cli-width@3.0.0",
        "pkg:npm/external-editor@3.1.0",
        "pkg:npm/figures@3.2.0",
        "pkg:npm/lodash@4.17.21",
        "pkg:npm/mute-stream@0.0.8",
        "pkg:npm/ora@5.4.1",
        "pkg:npm/run-async@2.4.1",
        "pkg:npm/rxjs@7.5.5",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1",
        "pkg:npm/through@2.3.8",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-interactive@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@4.1.0",
      "dependsOn": [
        "pkg:npm/argparse@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/node-addon-api@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-libc@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-template@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/github-from-package@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp-classic@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/napi-build-utils@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-abi@3.22.0",
      "dependsOn": [
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ini@1.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.8",
      "dependsOn": [
        "pkg:npm/deep-extend@0.6.0",
        "pkg:npm/ini@1.3.8",
        "pkg:npm/minimist@1.2.6",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/mimic-response@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decompress-response@6.0.0",
      "dependsOn": [
        "pkg:npm/mimic-response@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/simple-concat@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/simple-get@4.0.1",
      "dependsOn": [
        "pkg:npm/decompress-response@6.0.0",
        "pkg:npm/once@1.4.0",
        "pkg:npm/simple-concat@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/chownr@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-constants@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-stream@2.2.0",
      "dependsOn": [
        "pkg:npm/bl@4.1.0",
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/fs-constants@1.0.0",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/readable-stream@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/tar-fs@2.1.1",
      "dependsOn": [
        "pkg:npm/chownr@1.1.4",
        "pkg:npm/mkdirp-classic@0.5.3",
        "pkg:npm/pump@3.0.0",
        "pkg:npm/tar-stream@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/prebuild-install@7.1.1",
      "dependsOn": [
        "pkg:npm/detect-libc@2.0.1",
        "pkg:npm/expand-template@2.0.3",
        "pkg:npm/github-from-package@0.0.0",
        "pkg:npm/minimist@1.2.6",
        "pkg:npm/mkdirp-classic@0.5.3",
        "pkg:npm/napi-build-utils@1.0.2",
        "pkg:npm/node-abi@3.22.0",
        "pkg:npm/pump@3.0.0",
        "pkg:npm/rc@1.2.8",
        "pkg:npm/simple-get@4.0.1",
        "pkg:npm/tar-fs@2.1.1",
        "pkg:npm/tunnel-agent@0.6.0"
      ]
    },
    {
      "ref": "pkg:npm/keytar@7.9.0",
      "dependsOn": [
        "pkg:npm/node-addon-api@4.3.0",
        "pkg:npm/prebuild-install@7.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@sindresorhus/is@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/defer-to-connect@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@szmarczak/http-timer@4.0.6",
      "dependsOn": [
        "pkg:npm/defer-to-connect@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/http-cache-semantics@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/node@8.10.66",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/keyv@3.1.4",
      "dependsOn": [
        "pkg:npm/@types/node@8.10.66"
      ]
    },
    {
      "ref": "pkg:npm/@types/responselike@1.0.0",
      "dependsOn": [
        "pkg:npm/@types/node@8.10.66"
      ]
    },
    {
      "ref": "pkg:npm/@types/cacheable-request@6.0.2",
      "dependsOn": [
        "pkg:npm/@types/http-cache-semantics@4.0.1",
        "pkg:npm/@types/keyv@3.1.4",
        "pkg:npm/@types/node@8.10.66",
        "pkg:npm/@types/responselike@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cacheable-lookup@5.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimic-response@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-response@1.0.2",
      "dependsOn": [
        "pkg:npm/mimic-response@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@5.2.0",
      "dependsOn": [
        "pkg:npm/pump@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/http-cache-semantics@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/json-buffer@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-buffer@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compress-brotli@1.3.8",
      "dependsOn": [
        "pkg:npm/@types/json-buffer@3.0.0",
        "pkg:npm/json-buffer@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/keyv@4.3.2",
      "dependsOn": [
        "pkg:npm/compress-brotli@1.3.8",
        "pkg:npm/json-buffer@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lowercase-keys@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-url@6.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/responselike@2.0.0",
      "dependsOn": [
        "pkg:npm/lowercase-keys@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cacheable-request@7.0.2",
      "dependsOn": [
        "pkg:npm/clone-response@1.0.2",
        "pkg:npm/get-stream@5.2.0",
        "pkg:npm/http-cache-semantics@4.1.0",
        "pkg:npm/keyv@4.3.2",
        "pkg:npm/lowercase-keys@2.0.0",
        "pkg:npm/normalize-url@6.1.0",
        "pkg:npm/responselike@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/quick-lru@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-alpn@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http2-wrapper@1.0.3",
      "dependsOn": [
        "pkg:npm/quick-lru@5.1.1",
        "pkg:npm/resolve-alpn@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/p-cancelable@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/got@11.8.5",
      "dependsOn": [
        "pkg:npm/@sindresorhus/is@4.6.0",
        "pkg:npm/@szmarczak/http-timer@4.0.6",
        "pkg:npm/@types/cacheable-request@6.0.2",
        "pkg:npm/@types/responselike@1.0.0",
        "pkg:npm/cacheable-lookup@5.0.4",
        "pkg:npm/cacheable-request@7.0.2",
        "pkg:npm/decompress-response@6.0.0",
        "pkg:npm/http2-wrapper@1.0.3",
        "pkg:npm/lowercase-keys@2.0.0",
        "pkg:npm/p-cancelable@2.1.1",
        "pkg:npm/responselike@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/registry-auth-token@4.2.2",
      "dependsOn": [
        "pkg:npm/rc@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@5.1.0",
      "dependsOn": [
        "pkg:npm/rc@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/package-json@7.0.0",
      "dependsOn": [
        "pkg:npm/got@11.8.5",
        "pkg:npm/registry-auth-token@4.2.2",
        "pkg:npm/registry-url@5.1.0",
        "pkg:npm/semver@7.3.7"
      ]
    },
    {
      "ref": "pkg:npm/latest-version@6.0.0",
      "dependsOn": [
        "pkg:npm/package-json@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/liquidjs@9.37.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/astral-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slice-ansi@3.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/astral-regex@2.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-truncate@2.1.0",
      "dependsOn": [
        "pkg:npm/slice-ansi@3.0.0",
        "pkg:npm/string-width@4.2.3"
      ]
    },
    {
      "ref": "pkg:npm/colorette@2.0.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slice-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/astral-regex@2.0.0",
        "pkg:npm/is-fullwidth-code-point@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/wrap-ansi@6.2.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@4.3.0",
        "pkg:npm/string-width@4.2.3",
        "pkg:npm/strip-ansi@6.0.1"
      ]
    },
    {
      "ref": "pkg:npm/log-update@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-escapes@4.3.2",
        "pkg:npm/cli-cursor@3.1.0",
        "pkg:npm/slice-ansi@4.0.0",
        "pkg:npm/wrap-ansi@6.2.0"
      ]
    },
    {
      "ref": "pkg:npm/listr2@4.0.5",
      "dependsOn": [
        "pkg:npm/cli-truncate@2.1.0",
        "pkg:npm/colorette@2.0.19",
        "pkg:npm/enquirer@2.3.6",
        "pkg:npm/log-update@4.0.0",
        "pkg:npm/p-map@4.0.0",
        "pkg:npm/rfdc@1.3.0",
        "pkg:npm/rxjs@7.5.5",
        "pkg:npm/through@2.3.8",
        "pkg:npm/wrap-ansi@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/md5-file@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/data-uri-to-buffer@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-domexception@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fetch-blob@3.1.5",
      "dependsOn": [
        "pkg:npm/node-domexception@1.0.0",
        "pkg:npm/web-streams-polyfill@3.2.1"
      ]
    },
    {
      "ref": "pkg:npm/formdata-polyfill@4.0.10",
      "dependsOn": [
        "pkg:npm/fetch-blob@3.1.5"
      ]
    },
    {
      "ref": "pkg:npm/node-fetch@3.2.6",
      "dependsOn": [
        "pkg:npm/data-uri-to-buffer@4.0.0",
        "pkg:npm/fetch-blob@3.1.5",
        "pkg:npm/formdata-polyfill@4.0.10"
      ]
    },
    {
      "ref": "pkg:npm/define-lazy-prop@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/open@8.4.0",
      "dependsOn": [
        "pkg:npm/define-lazy-prop@2.0.0",
        "pkg:npm/is-docker@2.2.1",
        "pkg:npm/is-wsl@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/pathe@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier@2.7.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@kwsites/file-exists@1.1.1",
      "dependsOn": [
        "pkg:npm/debug@4.3.4"
      ]
    },
    {
      "ref": "pkg:npm/@kwsites/promise-deferred@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/simple-git@3.10.0",
      "dependsOn": [
        "pkg:npm/@kwsites/file-exists@1.1.1",
        "pkg:npm/@kwsites/promise-deferred@1.1.1",
        "pkg:npm/debug@4.3.4"
      ]
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.21",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.2",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/printable-characters@1.0.42",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/as-table@1.0.55",
      "dependsOn": [
        "pkg:npm/printable-characters@1.0.42"
      ]
    },
    {
      "ref": "pkg:npm/data-uri-to-buffer@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-source@2.0.12",
      "dependsOn": [
        "pkg:npm/data-uri-to-buffer@2.0.2",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/stacktracey@2.1.8",
      "dependsOn": [
        "pkg:npm/as-table@1.0.55",
        "pkg:npm/get-source@2.0.12"
      ]
    },
    {
      "ref": "pkg:npm/temp-dir@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@2.15.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-fest@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/crypto-random-string@4.0.0",
      "dependsOn": [
        "pkg:npm/type-fest@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/unique-string@3.0.0",
      "dependsOn": [
        "pkg:npm/crypto-random-string@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tempy@2.0.0",
      "dependsOn": [
        "pkg:npm/del@6.1.1",
        "pkg:npm/is-stream@3.0.0",
        "pkg:npm/temp-dir@2.0.0",
        "pkg:npm/type-fest@2.15.1",
        "pkg:npm/unique-string@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/term-size@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-escapes@5.0.0",
      "dependsOn": [
        "pkg:npm/type-fest@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/terminal-link@3.0.0",
      "dependsOn": [
        "pkg:npm/ansi-escapes@5.0.0",
        "pkg:npm/supports-hyperlinks@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/ts-error@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zod@3.17.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@shopify/cli-kit@3.0.25",
      "dependsOn": [
        "pkg:npm/@iarna/toml@2.2.5",
        "pkg:npm/@oclif/core@1.9.5",
        "pkg:npm/abort-controller@3.0.0",
        "pkg:npm/change-case@4.1.2",
        "pkg:npm/color-json@2.0.1",
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/conf@10.1.2",
        "pkg:npm/cross-zip@4.0.0",
        "pkg:npm/del@6.1.1",
        "pkg:npm/enquirer@2.3.6",
        "pkg:npm/env-paths@3.0.0",
        "pkg:npm/envfile@6.17.0",
        "pkg:npm/execa@6.1.0",
        "pkg:npm/fast-glob@3.2.11",
        "pkg:npm/fastify@4.2.0",
        "pkg:npm/find-up@6.3.0",
        "pkg:npm/find-versions@5.1.0",
        "pkg:npm/form-data@4.0.0",
        "pkg:npm/fs-extra@10.1.0",
        "pkg:npm/get-port-please@2.5.0",
        "pkg:npm/graphql-request@4.3.0",
        "pkg:npm/graphql@16.5.0",
        "pkg:npm/haikunator@2.1.2",
        "pkg:npm/inquirer@8.2.4",
        "pkg:npm/is-interactive@2.0.0",
        "pkg:npm/js-yaml@4.1.0",
        "pkg:npm/keytar@7.9.0",
        "pkg:npm/latest-version@6.0.0",
        "pkg:npm/liquidjs@9.37.0",
        "pkg:npm/listr2@4.0.5",
        "pkg:npm/md5-file@5.0.0",
        "pkg:npm/node-fetch@3.2.6",
        "pkg:npm/open@8.4.0",
        "pkg:npm/pathe@0.2.0",
        "pkg:npm/prettier@2.7.1",
        "pkg:npm/simple-git@3.10.0",
        "pkg:npm/source-map-support@0.5.21",
        "pkg:npm/stacktracey@2.1.8",
        "pkg:npm/tempy@2.0.0",
        "pkg:npm/term-size@3.0.2",
        "pkg:npm/terminal-link@3.0.0",
        "pkg:npm/ts-error@1.0.6",
        "pkg:npm/zod@3.17.3"
      ]
    },
    {
      "ref": "pkg:npm/buffer-crc32@0.2.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pend@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fd-slicer@1.1.0",
      "dependsOn": [
        "pkg:npm/pend@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yauzl@2.10.0",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.13",
        "pkg:npm/fd-slicer@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@types/yauzl@2.10.0",
      "dependsOn": [
        "pkg:npm/@types/node@8.10.66"
      ]
    },
    {
      "ref": "pkg:npm/extract-zip@2.0.1",
      "dependsOn": [
        "pkg:npm/@types/yauzl@2.10.0",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/get-stream@5.2.0",
        "pkg:npm/yauzl@2.10.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.clonedeep@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yaml@1.10.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hpagent@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@shopify/ngrok@4.3.2",
      "dependsOn": [
        "pkg:npm/@types/node@8.10.66",
        "pkg:npm/extract-zip@2.0.1",
        "pkg:npm/got@11.8.5",
        "pkg:npm/hpagent@0.1.2",
        "pkg:npm/lodash.clonedeep@4.5.0",
        "pkg:npm/uuid@8.3.2",
        "pkg:npm/yaml@1.10.2"
      ]
    },
    {
      "ref": "pkg:npm/@shopify/plugin-ngrok@0.2.9",
      "dependsOn": [
        "pkg:npm/@oclif/core@1.9.5",
        "pkg:npm/@shopify/cli-kit@3.0.25",
        "pkg:npm/@shopify/ngrok@4.3.2"
      ]
    },
    {
      "ref": "pkg:npm/@shopify/cli@3.0.25",
      "dependsOn": [
        "pkg:npm/@bugsnag/js@7.17.0",
        "pkg:npm/@oclif/core@1.9.5",
        "pkg:npm/@oclif/plugin-help@5.1.12",
        "pkg:npm/@oclif/plugin-plugins@2.1.0",
        "pkg:npm/@shopify/cli-kit@3.0.25",
        "pkg:npm/@shopify/plugin-ngrok@0.2.9"
      ]
    },
    {
      "ref": "pkg:npm/@shopify/hydrogen@0.26.1",
      "dependsOn": [
        "pkg:npm/@vitejs/plugin-react@1.3.2",
        "pkg:npm/abort-controller@3.0.0",
        "pkg:npm/body-parser@1.20.0",
        "pkg:npm/compression@1.7.4",
        "pkg:npm/connect@3.7.0",
        "pkg:npm/es-module-lexer@0.10.5",
        "pkg:npm/fast-glob@3.2.11",
        "pkg:npm/graphql-tag@2.12.6",
        "pkg:npm/graphql@16.5.0",
        "pkg:npm/history@5.3.0",
        "pkg:npm/kolorist@1.5.1",
        "pkg:npm/magic-string@0.26.2",
        "pkg:npm/node-fetch@2.6.7",
        "pkg:npm/path-to-regexp@6.2.1",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react-error-boundary@3.1.4",
        "pkg:npm/react-helmet-async@1.3.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/serve-static@1.15.0",
        "pkg:npm/set-cookie-parser@2.5.0",
        "pkg:npm/undici@5.6.0",
        "pkg:npm/uuid@8.3.2",
        "pkg:npm/vite-plugin-inspect@0.3.15",
        "pkg:npm/vite@2.9.13",
        "pkg:npm/web-streams-polyfill@3.2.1",
        "pkg:npm/worktop@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/kleur@4.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@miniflare/shared@2.5.1",
      "dependsOn": [
        "pkg:npm/ignore@5.2.0",
        "pkg:npm/kleur@4.1.5"
      ]
    },
    {
      "ref": "pkg:npm/@miniflare/watcher@2.5.1",
      "dependsOn": [
        "pkg:npm/@miniflare/shared@2.5.1"
      ]
    },
    {
      "ref": "pkg:npm/streamsearch@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/busboy@1.6.0",
      "dependsOn": [
        "pkg:npm/streamsearch@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/dotenv@10.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/undici@5.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/urlpattern-polyfill@4.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@miniflare/core@2.5.1",
      "dependsOn": [
        "pkg:npm/@iarna/toml@2.2.5",
        "pkg:npm/@miniflare/shared@2.5.1",
        "pkg:npm/@miniflare/watcher@2.5.1",
        "pkg:npm/busboy@1.6.0",
        "pkg:npm/dotenv@10.0.0",
        "pkg:npm/kleur@4.1.5",
        "pkg:npm/set-cookie-parser@2.5.0",
        "pkg:npm/undici@5.5.1",
        "pkg:npm/urlpattern-polyfill@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/@miniflare/cache@2.5.1",
      "dependsOn": [
        "pkg:npm/@miniflare/core@2.5.1",
        "pkg:npm/@miniflare/shared@2.5.1",
        "pkg:npm/http-cache-semantics@4.1.0",
        "pkg:npm/undici@5.5.1"
      ]
    },
    {
      "ref": "pkg:npm/@miniflare/runner-vm@2.5.1",
      "dependsOn": [
        "pkg:npm/@miniflare/shared@2.5.1"
      ]
    },
    {
      "ref": "pkg:npm/@miniflare/storage-memory@2.5.1",
      "dependsOn": [
        "pkg:npm/@miniflare/shared@2.5.1"
      ]
    },
    {
      "ref": "pkg:npm/@types/connect@3.4.35",
      "dependsOn": [
        "pkg:npm/@types/node@8.10.66"
      ]
    },
    {
      "ref": "pkg:npm/@types/mime@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semiver@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typescript@4.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@shopify/mini-oxygen@0.0.5",
      "dependsOn": [
        "pkg:npm/@miniflare/cache@2.5.1",
        "pkg:npm/@miniflare/core@2.5.1",
        "pkg:npm/@miniflare/runner-vm@2.5.1",
        "pkg:npm/@miniflare/shared@2.5.1",
        "pkg:npm/@miniflare/storage-memory@2.5.1",
        "pkg:npm/@types/connect@3.4.35",
        "pkg:npm/@types/mime@2.0.3",
        "pkg:npm/connect@3.7.0",
        "pkg:npm/inquirer@8.2.4",
        "pkg:npm/mime@3.0.0",
        "pkg:npm/semiver@1.1.0",
        "pkg:npm/typescript@4.7.4"
      ]
    },
    {
      "ref": "pkg:npm/@types/prettier@2.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@shopify/cli-hydrogen@3.0.25",
      "dependsOn": [
        "pkg:npm/@oclif/core@1.9.5",
        "pkg:npm/@shopify/cli-kit@3.0.25",
        "pkg:npm/@shopify/hydrogen@0.26.1",
        "pkg:npm/@shopify/mini-oxygen@0.0.5",
        "pkg:npm/@types/prettier@2.6.3",
        "pkg:npm/prettier@2.7.1",
        "pkg:npm/vite@2.9.13"
      ]
    },
    {
      "ref": "pkg:npm/@types/prop-types@15.7.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/scheduler@0.16.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/csstype@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/react@18.0.14",
      "dependsOn": [
        "pkg:npm/@types/prop-types@15.7.5",
        "pkg:npm/@types/scheduler@0.16.2",
        "pkg:npm/csstype@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/hello-world-ts@0.0.0",
      "dependsOn": [
        "pkg:npm/@shopify/cli-hydrogen@3.0.25",
        "pkg:npm/@shopify/cli@3.0.25",
        "pkg:npm/@shopify/hydrogen@1.0.2",
        "pkg:npm/@types/react@18.0.14",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/typescript@4.7.4",
        "pkg:npm/vite@2.9.13"
      ]
    },
    {
      "ref": "pkg:npm/hello-world-js@0.0.0",
      "dependsOn": [
        "pkg:npm/@shopify/cli-hydrogen@3.0.25",
        "pkg:npm/@shopify/cli@3.0.25",
        "pkg:npm/@shopify/hydrogen@1.0.2",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/vite@2.9.13"
      ]
    },
    {
      "ref": "pkg:npm/@headlessui/react@1.6.5",
      "dependsOn": [
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react@18.2.0"
      ]
    },
    {
      "ref": "pkg:npm/@heroicons/react@1.0.6",
      "dependsOn": [
        "pkg:npm/react@18.2.0"
      ]
    },
    {
      "ref": "pkg:npm/clsx@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/js-cookie@2.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@xobotyi/scrollbar-width@1.9.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/toggle-selection@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/copy-to-clipboard@3.3.1",
      "dependsOn": [
        "pkg:npm/toggle-selection@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/fast-shallow-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-cookie@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mdn-data@2.0.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-tree@1.1.3",
      "dependsOn": [
        "pkg:npm/mdn-data@2.0.14",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fastest-stable-stringify@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hyphenate-style-name@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-in-js-utils@2.0.1",
      "dependsOn": [
        "pkg:npm/hyphenate-style-name@1.0.4",
        "pkg:npm/isobject@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inline-style-prefixer@6.0.1",
      "dependsOn": [
        "pkg:npm/css-in-js-utils@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rtl-css-js@1.15.0",
      "dependsOn": [
        "pkg:npm/@babel/runtime@7.18.6"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stacktrace-gps@3.1.2",
      "dependsOn": [
        "pkg:npm/source-map@0.5.6",
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/stacktrace-js@2.0.2",
      "dependsOn": [
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/stack-generator@2.0.10",
        "pkg:npm/stacktrace-gps@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/stylis@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nano-css@5.3.5",
      "dependsOn": [
        "pkg:npm/css-tree@1.1.3",
        "pkg:npm/csstype@3.1.0",
        "pkg:npm/fastest-stable-stringify@2.0.2",
        "pkg:npm/inline-style-prefixer@6.0.1",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/rtl-css-js@1.15.0",
        "pkg:npm/sourcemap-codec@1.4.8",
        "pkg:npm/stacktrace-js@2.0.2",
        "pkg:npm/stylis@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/react-universal-interface@0.6.2",
      "dependsOn": [
        "pkg:npm/react@18.2.0",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/resize-observer-polyfill@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/screenfull@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/set-harmonic-interval@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/throttle-debounce@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ts-easing@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-use@17.4.0",
      "dependsOn": [
        "pkg:npm/@types/js-cookie@2.2.7",
        "pkg:npm/@xobotyi/scrollbar-width@1.9.5",
        "pkg:npm/copy-to-clipboard@3.3.1",
        "pkg:npm/fast-deep-equal@3.1.3",
        "pkg:npm/fast-shallow-equal@1.0.0",
        "pkg:npm/js-cookie@2.2.1",
        "pkg:npm/nano-css@5.3.5",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react-universal-interface@0.6.2",
        "pkg:npm/react@18.2.0",
        "pkg:npm/resize-observer-polyfill@1.5.1",
        "pkg:npm/screenfull@5.2.0",
        "pkg:npm/set-harmonic-interval@1.0.1",
        "pkg:npm/throttle-debounce@3.0.1",
        "pkg:npm/ts-easing@0.2.0",
        "pkg:npm/tslib@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/arg@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@4.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.3.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/arch@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pseudomap@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@4.1.5",
      "dependsOn": [
        "pkg:npm/pseudomap@1.0.2",
        "pkg:npm/yallist@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@5.1.0",
      "dependsOn": [
        "pkg:npm/lru-cache@4.1.5",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@2.0.2",
      "dependsOn": [
        "pkg:npm/path-key@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/p-finally@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-eof@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@0.8.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@5.1.0",
        "pkg:npm/get-stream@3.0.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/npm-run-path@2.0.2",
        "pkg:npm/p-finally@1.0.0",
        "pkg:npm/signal-exit@3.0.7",
        "pkg:npm/strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/clipboardy@1.2.2",
      "dependsOn": [
        "pkg:npm/arch@2.2.0",
        "pkg:npm/execa@0.8.0"
      ]
    },
    {
      "ref": "pkg:npm/titleize@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/title@3.4.4",
      "dependsOn": [
        "pkg:npm/arg@1.0.0",
        "pkg:npm/chalk@2.3.0",
        "pkg:npm/clipboardy@1.2.2",
        "pkg:npm/titleize@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/textr@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-apostrophes@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-apostrophes-for-possessive-plurals@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-arrows@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-copyright@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-currency-db@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-currency@1.1.2",
      "dependsOn": [
        "pkg:npm/typographic-currency-db@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/typographic-ellipses@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-em-dashes@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-en-dashes@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-math-symbols@1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-quotes-l10n-db@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-quotes@1.2.2",
      "dependsOn": [
        "pkg:npm/typographic-quotes-l10n-db@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/typographic-registered-trademark@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-single-spaces@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-trademark@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/typographic-base@1.0.4",
      "dependsOn": [
        "pkg:npm/textr@0.3.0",
        "pkg:npm/typographic-apostrophes-for-possessive-plurals@1.0.5",
        "pkg:npm/typographic-apostrophes@1.1.1",
        "pkg:npm/typographic-arrows@1.0.3",
        "pkg:npm/typographic-copyright@1.0.1",
        "pkg:npm/typographic-currency@1.1.2",
        "pkg:npm/typographic-ellipses@1.0.11",
        "pkg:npm/typographic-em-dashes@1.0.2",
        "pkg:npm/typographic-en-dashes@1.0.1",
        "pkg:npm/typographic-math-symbols@1.1.5",
        "pkg:npm/typographic-quotes@1.2.2",
        "pkg:npm/typographic-registered-trademark@1.0.1",
        "pkg:npm/typographic-single-spaces@1.0.2",
        "pkg:npm/typographic-trademark@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/@shopify/prettier-config@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arg@5.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/anymatch@3.1.2",
      "dependsOn": [
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@2.1.0",
      "dependsOn": [
        "pkg:npm/binary-extensions@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@3.6.0",
      "dependsOn": [
        "pkg:npm/picomatch@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@3.5.3",
      "dependsOn": [
        "pkg:npm/anymatch@3.1.2",
        "pkg:npm/braces@3.0.2",
        "pkg:npm/fsevents@2.3.2",
        "pkg:npm/glob-parent@5.1.2",
        "pkg:npm/is-binary-path@2.1.0",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/readdirp@3.6.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn@7.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-walk@7.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-node@1.8.2",
      "dependsOn": [
        "pkg:npm/acorn-walk@7.2.0",
        "pkg:npm/acorn@7.4.1",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/defined@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detective@5.2.1",
      "dependsOn": [
        "pkg:npm/acorn-node@1.8.2",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/minimist@1.2.6"
      ]
    },
    {
      "ref": "pkg:npm/didyoumean@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dlv@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-parent@6.0.2",
      "dependsOn": [
        "pkg:npm/is-glob@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/lilconfig@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-hash@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-value-parser@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-cache@1.0.0",
      "dependsOn": [
        "pkg:npm/pify@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-import@14.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14",
        "pkg:npm/read-cache@1.0.0",
        "pkg:npm/resolve@1.22.1"
      ]
    },
    {
      "ref": "pkg:npm/camelcase-css@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-js@4.0.0",
      "dependsOn": [
        "pkg:npm/camelcase-css@2.0.1",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-load-config@3.1.4",
      "dependsOn": [
        "pkg:npm/lilconfig@2.0.5",
        "pkg:npm/postcss@8.4.14",
        "pkg:npm/yaml@1.10.2"
      ]
    },
    {
      "ref": "pkg:npm/cssesc@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-selector-parser@6.0.10",
      "dependsOn": [
        "pkg:npm/cssesc@3.0.0",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-nested@5.0.6",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/tailwindcss@3.1.4",
      "dependsOn": [
        "pkg:npm/arg@5.0.2",
        "pkg:npm/chokidar@3.5.3",
        "pkg:npm/color-name@1.1.4",
        "pkg:npm/detective@5.2.1",
        "pkg:npm/didyoumean@1.2.2",
        "pkg:npm/dlv@1.1.3",
        "pkg:npm/fast-glob@3.2.11",
        "pkg:npm/glob-parent@6.0.2",
        "pkg:npm/is-glob@4.0.3",
        "pkg:npm/lilconfig@2.0.5",
        "pkg:npm/normalize-path@3.0.0",
        "pkg:npm/object-hash@3.0.0",
        "pkg:npm/picocolors@1.0.0",
        "pkg:npm/postcss-import@14.1.0",
        "pkg:npm/postcss-js@4.0.0",
        "pkg:npm/postcss-load-config@3.1.4",
        "pkg:npm/postcss-nested@5.0.6",
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14",
        "pkg:npm/quick-lru@5.1.1",
        "pkg:npm/resolve@1.22.1"
      ]
    },
    {
      "ref": "pkg:npm/mini-svg-data-uri@1.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tailwindcss/forms@0.5.2",
      "dependsOn": [
        "pkg:npm/mini-svg-data-uri@1.4.4",
        "pkg:npm/tailwindcss@3.1.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash.castarray@4.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.merge@4.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@tailwindcss/typography@0.5.2",
      "dependsOn": [
        "pkg:npm/lodash.castarray@4.4.0",
        "pkg:npm/lodash.isplainobject@4.0.6",
        "pkg:npm/lodash.merge@4.6.2",
        "pkg:npm/tailwindcss@3.1.4"
      ]
    },
    {
      "ref": "pkg:npm/playwright-core@1.23.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/playwright@1.23.1",
      "dependsOn": [
        "pkg:npm/playwright-core@1.23.1"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/selector-specificity@2.0.1",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-cascade-layers@1.0.4",
      "dependsOn": [
        "pkg:npm/@csstools/selector-specificity@2.0.1",
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-color-function@1.1.0",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-font-format-keywords@1.0.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-hwb-function@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-ic-unit@1.0.0",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-is-pseudo-class@2.0.6",
      "dependsOn": [
        "pkg:npm/@csstools/selector-specificity@2.0.1",
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-normalize-display-values@1.0.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-oklab-function@1.1.0",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-stepped-value-functions@1.0.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-trigonometric-functions@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@csstools/postcss-unset-value@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/fraction.js@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-range@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/autoprefixer@10.4.7",
      "dependsOn": [
        "pkg:npm/browserslist@4.21.1",
        "pkg:npm/caniuse-lite@1.0.30001361",
        "pkg:npm/fraction.js@4.2.0",
        "pkg:npm/normalize-range@0.1.2",
        "pkg:npm/picocolors@1.0.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/css-blank-pseudo@3.0.3",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/css-has-pseudo@3.0.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/css-prefers-color-scheme@6.0.3",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/cssdb@6.6.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-attribute-case-insensitive@5.0.1",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-clamp@4.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-color-functional-notation@4.2.3",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-color-hex-alpha@8.0.4",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-color-rebeccapurple@7.1.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-custom-media@8.0.2",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-custom-properties@12.1.8",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-custom-selectors@6.0.3",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-dir-pseudo-class@6.0.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-double-position-gradients@3.1.1",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-env-function@4.0.6",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-focus-visible@6.0.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-focus-within@5.0.4",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-font-variant@5.0.0",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-gap-properties@3.0.3",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-image-set-function@4.0.6",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-initial@4.0.1",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-lab-function@4.2.0",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-logical@5.0.4",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-media-minmax@5.0.0",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-nesting@10.1.10",
      "dependsOn": [
        "pkg:npm/@csstools/selector-specificity@2.0.1",
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-opacity-percentage@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-overflow-shorthand@3.0.3",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-page-break@3.0.4",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-place@7.0.4",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-pseudo-class-any-link@7.1.5",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
      "dependsOn": [
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-selector-not@6.0.0",
      "dependsOn": [
        "pkg:npm/postcss-selector-parser@6.0.10",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-preset-env@7.7.2",
      "dependsOn": [
        "pkg:npm/@csstools/postcss-cascade-layers@1.0.4",
        "pkg:npm/@csstools/postcss-color-function@1.1.0",
        "pkg:npm/@csstools/postcss-font-format-keywords@1.0.0",
        "pkg:npm/@csstools/postcss-hwb-function@1.0.1",
        "pkg:npm/@csstools/postcss-ic-unit@1.0.0",
        "pkg:npm/@csstools/postcss-is-pseudo-class@2.0.6",
        "pkg:npm/@csstools/postcss-normalize-display-values@1.0.0",
        "pkg:npm/@csstools/postcss-oklab-function@1.1.0",
        "pkg:npm/@csstools/postcss-progressive-custom-properties@1.3.0",
        "pkg:npm/@csstools/postcss-stepped-value-functions@1.0.0",
        "pkg:npm/@csstools/postcss-trigonometric-functions@1.0.1",
        "pkg:npm/@csstools/postcss-unset-value@1.0.1",
        "pkg:npm/autoprefixer@10.4.7",
        "pkg:npm/browserslist@4.21.1",
        "pkg:npm/css-blank-pseudo@3.0.3",
        "pkg:npm/css-has-pseudo@3.0.4",
        "pkg:npm/css-prefers-color-scheme@6.0.3",
        "pkg:npm/cssdb@6.6.3",
        "pkg:npm/postcss-attribute-case-insensitive@5.0.1",
        "pkg:npm/postcss-clamp@4.1.0",
        "pkg:npm/postcss-color-functional-notation@4.2.3",
        "pkg:npm/postcss-color-hex-alpha@8.0.4",
        "pkg:npm/postcss-color-rebeccapurple@7.1.0",
        "pkg:npm/postcss-custom-media@8.0.2",
        "pkg:npm/postcss-custom-properties@12.1.8",
        "pkg:npm/postcss-custom-selectors@6.0.3",
        "pkg:npm/postcss-dir-pseudo-class@6.0.4",
        "pkg:npm/postcss-double-position-gradients@3.1.1",
        "pkg:npm/postcss-env-function@4.0.6",
        "pkg:npm/postcss-focus-visible@6.0.4",
        "pkg:npm/postcss-focus-within@5.0.4",
        "pkg:npm/postcss-font-variant@5.0.0",
        "pkg:npm/postcss-gap-properties@3.0.3",
        "pkg:npm/postcss-image-set-function@4.0.6",
        "pkg:npm/postcss-initial@4.0.1",
        "pkg:npm/postcss-lab-function@4.2.0",
        "pkg:npm/postcss-logical@5.0.4",
        "pkg:npm/postcss-media-minmax@5.0.0",
        "pkg:npm/postcss-nesting@10.1.10",
        "pkg:npm/postcss-opacity-percentage@1.1.2",
        "pkg:npm/postcss-overflow-shorthand@3.0.3",
        "pkg:npm/postcss-page-break@3.0.4",
        "pkg:npm/postcss-place@7.0.4",
        "pkg:npm/postcss-pseudo-class-any-link@7.1.5",
        "pkg:npm/postcss-replace-overflow-wrap@4.0.0",
        "pkg:npm/postcss-selector-not@6.0.0",
        "pkg:npm/postcss-value-parser@4.2.0",
        "pkg:npm/postcss@8.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@types/chai@4.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@types/chai-subset@1.3.3",
      "dependsOn": [
        "pkg:npm/@types/chai@4.3.1"
      ]
    },
    {
      "ref": "pkg:npm/assertion-error@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/check-error@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-detect@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-eql@3.0.1",
      "dependsOn": [
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/get-func-name@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loupe@2.3.4",
      "dependsOn": [
        "pkg:npm/get-func-name@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pathval@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chai@4.3.6",
      "dependsOn": [
        "pkg:npm/assertion-error@1.1.0",
        "pkg:npm/check-error@1.0.2",
        "pkg:npm/deep-eql@3.0.1",
        "pkg:npm/get-func-name@2.0.0",
        "pkg:npm/loupe@2.3.4",
        "pkg:npm/pathval@1.1.1",
        "pkg:npm/type-detect@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/local-pkg@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinypool@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinyspy@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vitest@0.15.2",
      "dependsOn": [
        "pkg:npm/@types/chai-subset@1.3.3",
        "pkg:npm/@types/chai@4.3.1",
        "pkg:npm/@types/node@8.10.66",
        "pkg:npm/chai@4.3.6",
        "pkg:npm/debug@4.3.4",
        "pkg:npm/local-pkg@0.4.1",
        "pkg:npm/tinypool@0.1.3",
        "pkg:npm/tinyspy@0.3.3",
        "pkg:npm/vite@2.9.13"
      ]
    },
    {
      "ref": "pkg:npm/demo-store-ts@0.0.0",
      "dependsOn": [
        "pkg:npm/@headlessui/react@1.6.5",
        "pkg:npm/@heroicons/react@1.0.6",
        "pkg:npm/@shopify/cli-hydrogen@3.0.25",
        "pkg:npm/@shopify/cli@3.0.25",
        "pkg:npm/@shopify/hydrogen@1.0.2",
        "pkg:npm/@shopify/prettier-config@1.1.2",
        "pkg:npm/@tailwindcss/forms@0.5.2",
        "pkg:npm/@tailwindcss/typography@0.5.2",
        "pkg:npm/@types/react@18.0.14",
        "pkg:npm/clsx@1.1.1",
        "pkg:npm/graphql-tag@2.12.6",
        "pkg:npm/playwright@1.23.1",
        "pkg:npm/postcss-import@14.1.0",
        "pkg:npm/postcss-preset-env@7.7.2",
        "pkg:npm/postcss@8.4.14",
        "pkg:npm/prettier@2.7.1",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react-use@17.4.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/tailwindcss@3.1.4",
        "pkg:npm/title@3.4.4",
        "pkg:npm/typescript@4.7.4",
        "pkg:npm/typographic-base@1.0.4",
        "pkg:npm/vite@2.9.13",
        "pkg:npm/vitest@0.15.2"
      ]
    },
    {
      "ref": "pkg:npm/demo-store-js@0.0.0",
      "dependsOn": [
        "pkg:npm/@headlessui/react@1.6.5",
        "pkg:npm/@heroicons/react@1.0.6",
        "pkg:npm/@shopify/cli-hydrogen@3.0.25",
        "pkg:npm/@shopify/cli@3.0.25",
        "pkg:npm/@shopify/hydrogen@1.0.2",
        "pkg:npm/@shopify/prettier-config@1.1.2",
        "pkg:npm/@tailwindcss/forms@0.5.2",
        "pkg:npm/@tailwindcss/typography@0.5.2",
        "pkg:npm/clsx@1.1.1",
        "pkg:npm/graphql-tag@2.12.6",
        "pkg:npm/playwright@1.23.1",
        "pkg:npm/postcss-import@14.1.0",
        "pkg:npm/postcss-preset-env@7.7.2",
        "pkg:npm/postcss@8.4.14",
        "pkg:npm/prettier@2.7.1",
        "pkg:npm/react-dom@18.2.0",
        "pkg:npm/react-use@17.4.0",
        "pkg:npm/react@18.2.0",
        "pkg:npm/tailwindcss@3.1.4",
        "pkg:npm/title@3.4.4",
        "pkg:npm/typographic-base@1.0.4",
        "pkg:npm/vite@2.9.13",
        "pkg:npm/vitest@0.15.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/hello-world-ts@0.0.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-21T18:56:15Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 21, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'hello-world-ts' with version '0.0.0'. The application also has 3 child modules/components. The package type in this SBOM is npm with 22 purl namespaces described under components. The components were identified from 4 source files."
    }
  ]
}