{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:859082a3-3fed-4743-82b6-c32a64077b08",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-06T13:16:13Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "algokit-utils",
      "group": "@algorandfoundation",
      "version": "9.2.3",
      "description": "A set of core Algorand utilities written in TypeScript and released via npm that make it easier to build solutions on Algorand.",
      "purl": "pkg:npm/%40algorandfoundation/algokit-utils@9.2.3",
      "bom-ref": "pkg:npm/@algorandfoundation/algokit-utils@9.2.3",
      "author": "Algorand Foundation",
      "properties": [
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/algorandfoundation/algokit-ts.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "pnpm-lock.yaml"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Algorand Technologies & the MessagePack community"
        }
      ],
      "group": "",
      "name": "algorand-msgpack",
      "version": "1.1.0",
      "description": "MessagePack for ECMA-262/JavaScript/TypeScript",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3c93ba4142791a501e69fa32fb7f54d16942254d20c4d1c7ac16ed660fb9652daa3ed5c021b6fbd99861373a78ac4ddd313a7d75f10330ef8491a9d76a698bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/algorand-msgpack@1.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://msgpack.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/algorand/msgpack-javascript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/algorand-msgpack@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, prepare, prepublishOnly, clean, test, test:dist, test:cover, test:deno, test:fuzz, cover:clean, cover:report, test:browser, test:browser:firefox, test:browser:chrome, test:watch:browser, test:watch:nodejs, lint, lint:fix, lint:print-config, update-dependencies"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, test:dist, test:watch:browser, test:watch:nodejs"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Algorand"
        },
        {
          "name": " llc"
        }
      ],
      "group": "",
      "name": "algosdk",
      "version": "3.9.0",
      "description": "The official JavaScript SDK for Algorand",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfa0e833d50d5959a8280845f5afe341ae939ef081e647fe94395445d4b7427d602c6c6612d90b996e5a5330738095e9d7c7aebe6f1e4bfd1b35815d07d6dc55"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/algosdk@3.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/algorand/js-algorand-sdk.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/algosdk@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, prepare, prepare-browser-tests, build, docs, docs:dev, lint, lint:fix, format, format:check, check-types, audit, commit-lint, semantic-release, example"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "prepare"
        },
        {
          "name": "ImportedModules",
          "value": "algosdk,Address,algosdk/Address,SignedTransaction,algosdk/SignedTransaction,decodeMsgpack,algosdk/decodeMsgpack,TransactionType,algosdk/TransactionType,stringifyJSON,algosdk/stringifyJSON,ABIArrayDynamicType,algosdk/ABIArrayDynamicType,ABIArrayStaticType,algosdk/ABIArrayStaticType,ABIByteType,algosdk/ABIByteType,ABITupleType,algosdk/ABITupleType,ABIUintType,algosdk/ABIUintType"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "account/account.js",
            "line": 7
          },
          {
            "location": "account/mnemonic-account.js",
            "line": 2
          },
          {
            "location": "app-deploy.js",
            "line": 11
          },
          {
            "location": "app.js",
            "line": 6
          },
          {
            "location": "indexer-lookup.js",
            "line": 2
          },
          {
            "location": "testing/account.js",
            "line": 4
          },
          {
            "location": "testing/transaction-logger.js",
            "line": 4
          },
          {
            "location": "transaction/legacy-bridge.js",
            "line": 8
          },
          {
            "location": "transaction/perform-atomic-transaction-composer-simulate.js",
            "line": 2
          },
          {
            "location": "transaction/resolve-signed-transactions.js",
            "line": 2
          },
          {
            "location": "transaction/transaction.js",
            "line": 7
          },
          {
            "location": "util.js",
            "line": 2
          },
          {
            "location": "account/account.mjs",
            "line": 6
          },
          {
            "location": "account/account.mjs",
            "line": 40
          },
          {
            "location": "account/account.mjs",
            "line": 53
          },
          {
            "location": "account/account.mjs",
            "line": 101
          },
          {
            "location": "account/account.mjs",
            "line": 111
          },
          {
            "location": "account/mnemonic-account.mjs",
            "line": 1
          },
          {
            "location": "account/mnemonic-account.mjs",
            "line": 14
          },
          {
            "location": "app-deploy.mjs",
            "line": 10
          },
          {
            "location": "app-deploy.mjs",
            "line": 42
          },
          {
            "location": "app-deploy.mjs",
            "line": 61
          },
          {
            "location": "app-deploy.mjs",
            "line": 76
          },
          {
            "location": "app-deploy.mjs",
            "line": 120
          },
          {
            "location": "app-deploy.mjs",
            "line": 123
          },
          {
            "location": "app.mjs",
            "line": 5
          },
          {
            "location": "app.mjs",
            "line": 272
          },
          {
            "location": "indexer-lookup.mjs",
            "line": 2
          },
          {
            "location": "testing/account.mjs",
            "line": 3
          },
          {
            "location": "testing/account.mjs",
            "line": 10
          },
          {
            "location": "testing/account.mjs",
            "line": 11
          },
          {
            "location": "testing/account.mjs",
            "line": 23
          },
          {
            "location": "testing/transaction-logger.mjs",
            "line": 3
          },
          {
            "location": "transaction/legacy-bridge.mjs",
            "line": 7
          },
          {
            "location": "transaction/legacy-bridge.mjs",
            "line": 49
          },
          {
            "location": "transaction/legacy-bridge.mjs",
            "line": 95
          },
          {
            "location": "transaction/legacy-bridge.mjs",
            "line": 107
          },
          {
            "location": "transaction/perform-atomic-transaction-composer-simulate.mjs",
            "line": 1
          },
          {
            "location": "transaction/perform-atomic-transaction-composer-simulate.mjs",
            "line": 13
          },
          {
            "location": "transaction/perform-atomic-transaction-composer-simulate.mjs",
            "line": 26
          },
          {
            "location": "transaction/resolve-signed-transactions.mjs",
            "line": 1
          },
          {
            "location": "transaction/resolve-signed-transactions.mjs",
            "line": 18
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 6
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 119
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 132
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 206
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 417
          },
          {
            "location": "util.mjs",
            "line": 2
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "T. Jameson Little <t.jameson.little@gmail.com>"
        }
      ],
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "description": "Base64 encoding/decoding in pure JS",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/beatgammit/base64-js"
        },
        {
          "type": "vcs",
          "url": "git://github.com/beatgammit/base64-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, lint, test, unit"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Michael Mclaughlin <M8ch88l@gmail.com>"
        }
      ],
      "group": "",
      "name": "bignumber.js",
      "version": "9.3.1",
      "description": "A library for arbitrary-precision decimal and non-decimal arithmetic",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a8d2e5f5e682144bbc09dd16f7d05b3a4a455b2e63c100a7659bbabdf9a93d6db21e15fd0cc2e06c415eb3efe5fbebcfdc1ec7e0f96972b03589726b618ec8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bignumber.js@9.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/MikeMcl/bignumber.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bignumber.js@9.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "buffer",
      "version": "6.0.3",
      "description": "Node.js Buffer API, for the browser",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "153882a4dc6dc226591c465b71b4c87198c44552029fdcaafe90c591397de7f031cc3d6768172d37b60eebcae233f80b48363bb1dacc6f2f21a1f00362ebaa38"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@6.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "perf, perf-node, size, test, test-browser-old, test-browser-old-local, test-browser-new, test-browser-new-local, test-node, update-authors"
        },
        {
          "name": "ImportedModules",
          "value": "buffer,Buffer,buffer/Buffer"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ],
        "occurrences": [
          {
            "location": "transaction/transaction.js",
            "line": 9
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 7
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 555
          },
          {
            "location": "transaction/transaction.mjs",
            "line": 566
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chen"
        },
        {
          "name": " Yi-Cyuan <emn178@gmail.com>"
        }
      ],
      "group": "",
      "name": "hi-base32",
      "version": "0.5.1",
      "description": "A simple Base32 encode / decode function for JavaScript supports UTF-8 encoding.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "126041a6f75887fe17c6c9d4c9bb0f6a0e958a43d89cddf4b5dfaf424f86237aa96a15441bdfa04e41b46975714e306a4394fa8a36d622eefb3be0b95855ac9c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hi-base32@0.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/emn178/hi-base32"
        },
        {
          "type": "vcs",
          "url": "https://github.com/emn178/hi-base32.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hi-base32@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, report, coveralls, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      },
      "tags": [
        "decode",
        "encode"
      ]
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/feross/ieee754.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, test-browser, test-browser-local, test-node"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chen"
        },
        {
          "name": " Yi-Cyuan <emn178@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-sha256",
      "version": "0.9.0",
      "description": "A simple SHA-256 / SHA-224 hash function for JavaScript supports UTF-8 encoding.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b206b730787db2040ddbea49f55619fb52cfc173b1b812410399eb479fe87cf7ee889044da19e3b1a37cb1ef09ce73a618b376a78f4f7b953fb6d69f72cfdaa4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-sha256@0.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/emn178/js-sha256"
        },
        {
          "type": "vcs",
          "url": "https://github.com/emn178/js-sha256.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-sha256@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, report, coveralls, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chen"
        },
        {
          "name": " Yi-Cyuan <emn178@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-sha3",
      "version": "0.8.0",
      "description": "A simple SHA-3 / Keccak / Shake hash function for JavaScript supports UTF-8 encoding.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "805d5c46b1e123335f4e873cd363fcd3437c3e95d2f9ebcb2d77ec569a30aa600547dbb06e2f3d5af5e0d90b293a65cbf102fce89e13d44a45bbec94930258dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-sha3@0.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/emn178/js-sha3"
        },
        {
          "type": "vcs",
          "url": "https://github.com/emn178/js-sha3.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-sha3@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, report, coveralls, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Chen"
        },
        {
          "name": " Yi-Cyuan <emn178@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-sha512",
      "version": "0.8.0",
      "description": "This is a simple SHA-512, SHA-384, SHA-512/224, SHA-512/256 hash functions for JavaScript supports UTF-8 encoding.",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d6b2679f1ba264a1daadf9e3d3bc164248c16037b0a57248ddd0eeecbb7234f815b641651324dce392d1ecced18b86770fda1f26705f55f58d876b9f6901589"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-sha512@0.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/emn178/js-sha512"
        },
        {
          "type": "vcs",
          "url": "https://github.com/emn178/js-sha512.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-sha512@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test, report, coveralls, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Sidorov <sidorares@yandex.ru>"
        }
      ],
      "group": "",
      "name": "json-bigint",
      "version": "1.0.0",
      "description": "JSON.parse with bigints support",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a23efffc56966e59bbcb48cb530d4f2111fad95a0fe61ff9d5fdbe28d0261b4b1bb550840f2ddc0a3822322d05fe5483cee6facb5f78bcaada85ca174f49449"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-bigint@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/json-bigint@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TweetNaCl-js contributors"
        }
      ],
      "group": "",
      "name": "tweetnacl",
      "version": "1.0.3",
      "description": "Port of TweetNaCl cryptographic library to JavaScript",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eabb7e44deda3a2d6718cc82e176b90dd622ba497651609b7097eded887145e046403ece00cf0f6f1c3a60ca38af676234403c1449aedf660e9fdae16a2139cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "url": "https://opensource.org/licenses/Unlicense",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tweetnacl@1.0.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://tweetnacl.js.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/dchest/tweetnacl-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test-node, test-node-all, build-test-browser, test, bench, lint"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build, build-test-browser"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "",
      "name": "vlq",
      "version": "2.0.4",
      "description": "Generate, and decode, base64 VLQ mappings for source maps and other uses",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a87633dadb03d0164adad46f02cc90531d78609371154b0c5259734faf57e07452d46fc92f2d5d6211beab1606ac22c8cff361d623a76c6f9228dba0c39dab0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vlq@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/vlq@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "pnpm-lock.yaml"
        },
        {
          "name": "cdx:npm:scripts",
          "value": "build, test, prepublishOnly"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "pnpm-lock.yaml"
              }
            ],
            "concludedValue": "pnpm-lock.yaml"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@algorandfoundation/algokit-utils@9.2.3",
      "dependsOn": [
        "pkg:npm/algosdk@3.9.0",
        "pkg:npm/buffer@6.0.3"
      ]
    },
    {
      "ref": "pkg:npm/algorand-msgpack@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/algosdk@3.9.0",
      "dependsOn": [
        "pkg:npm/algorand-msgpack@1.1.0",
        "pkg:npm/hi-base32@0.5.1",
        "pkg:npm/js-sha256@0.9.0",
        "pkg:npm/js-sha3@0.8.0",
        "pkg:npm/js-sha512@0.8.0",
        "pkg:npm/json-bigint@1.0.0",
        "pkg:npm/tweetnacl@1.0.3",
        "pkg:npm/vlq@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bignumber.js@9.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@6.0.3",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/hi-base32@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-sha256@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-sha3@0.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-sha512@0.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-bigint@1.0.0",
      "dependsOn": [
        "pkg:npm/bignumber.js@9.3.1"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vlq@2.0.4",
      "dependsOn": []
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@algorandfoundation/algokit-utils@9.2.3"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-11-06T13:16:13Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Friday, November 6, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'algokit-utils' with version '9.2.3'."
    }
  ]
}