{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:ba23d857-3f1c-49ed-b1cf-a340d625e5cb",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-27T10:46:10Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "angular",
      "group": "",
      "version": "1.4.7-tuxcare.2",
      "purl": "pkg:npm/angular@1.4.7-tuxcare.2",
      "bom-ref": "pkg:npm/angular@1.4.7-tuxcare.2",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:risky_scripts",
          "value": "postinstall"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/angular/angular.js.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "bower.json\\nbuild/docs/components/google-code-prettify-1.0.1/bower.json\\nbuild/docs/components/jquery-2.1.1/jquery.min.js\\nbuild/docs/components/open-sans-fontface-1.0.4/bower.json\\ndocs/bower.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "jquery",
      "version": "2.1.1",
      "scope": "optional",
      "purl": "pkg:npm/jquery@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/jquery@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "build/docs/components/jquery-2.1.1/jquery.min.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.25,
            "methods": [
              {
                "technique": "filename",
                "confidence": 0.25,
                "value": "build/docs/components/jquery-2.1.1/jquery.min.js"
              }
            ],
            "concludedValue": "build/docs/components/jquery-2.1.1/jquery.min.js"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "AngularJS",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/AngularJS",
      "type": "library",
      "bom-ref": "pkg:npm/AngularJS",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bower.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bower.json"
              }
            ],
            "concludedValue": "bower.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "AngularJS-docs-app",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/AngularJS-docs-app",
      "type": "library",
      "bom-ref": "pkg:npm/AngularJS-docs-app",
      "properties": [
        {
          "name": "SrcFile",
          "value": "docs/bower.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "docs/bower.json"
              }
            ],
            "concludedValue": "docs/bower.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "open-sans-fontface",
      "version": "1.0.4",
      "description": "The Open Sans fontface",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/open-sans-fontface@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/open-sans-fontface@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "build/docs/components/open-sans-fontface-1.0.4/bower.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "build/docs/components/open-sans-fontface-1.0.4/bower.json"
              }
            ],
            "concludedValue": "build/docs/components/open-sans-fontface-1.0.4/bower.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "google-code-prettify",
      "version": "1.0.1",
      "scope": "optional",
      "purl": "pkg:npm/google-code-prettify@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/google-code-prettify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "build/docs/components/google-code-prettify-1.0.1/bower.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "build/docs/components/google-code-prettify-1.0.1/bower.json"
              }
            ],
            "concludedValue": "build/docs/components/google-code-prettify-1.0.1/bower.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "angular-benchpress",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72930602d5e6e1dd429b277f274545f00857342fff693c253cf5cbcc030506bd484d37ec7c7a1c7c8eb70641460256f950674772f78df6b22d422dc6704b5a75"
        }
      ],
      "purl": "pkg:npm/angular-benchpress@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/angular-benchpress/-/angular-benchpress-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/angular-benchpress@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/angular-benchpress/-/angular-benchpress-0.2.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/benchpress"
        },
        {
          "name": "cdx:npm:bin",
          "value": "benchpress"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bootstrap",
      "version": "3.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5f9c1299a009d35db042be9cdf17a82c0c375374d6d26ec1189d9f268be30e560f0281bd5b7ccf4646f20976037d68c45b4e5a8dce9d0424d2790765fa8b0ce"
        }
      ],
      "purl": "pkg:npm/bootstrap@3.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bootstrap/-/bootstrap-3.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bootstrap@3.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bootstrap/-/bootstrap-3.3.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.4.1 used instead of 3.3.4"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version of Bootstrap is no longer supported. Please upgrade to the latest version."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify",
      "version": "7.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9093bf83031abbee558ecba4bb7f017c219e7dc0f30f8f3bd158bd17a48fc60e23a7c412ed1b2d7c433a780dbddd2ff0f17215a6f8c3324e179dc04c2f7ff295"
        }
      ],
      "purl": "pkg:npm/browserify@7.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify/-/browserify-7.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify@7.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify/-/browserify-7.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/.bin/browserify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a522cdfc2eaee89151f0bfb44f343412573e55ba3151716d370d75448d54713707124b50a8828828ae52e270195f88fc9a94e99c2b66aa947eb613dfa93d752a"
        }
      ],
      "purl": "pkg:npm/assert@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert/-/assert-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert/-/assert-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util",
      "version": "0.10.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4a8877ec9a4a9a72e2a391191d57b4ac7c327610688fb0af76b3632135263472b6b18d374a4eda8ab096825a9e0b5b7dd967438f52fd563bf4c5bcd411890c5"
        }
      ],
      "purl": "pkg:npm/util@0.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util/-/util-0.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util/-/util-0.10.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.10.4 used instead of 0.10.3"
        },
        {
          "name": "ImportedModules",
          "value": "util"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.12.5 used instead of 0.10.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "changelog.js",
            "line": 10
          },
          {
            "location": "compare-master-to-stable.js",
            "line": 5
          },
          {
            "location": "validate-commit-msg.js",
            "line": 15
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f275aada72d3030774da34ea244c54605483fdf2aae951fd63fa06d9a71c73f91d23457df016a0f1de5ae208b75c7cfbdeb0d66b63ef4edbdc598aae2aa48434"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.4 used instead of 2.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-pack",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04795ae446dbc633722cc15431a9958de4d8faad50c076eb60d5e558e930ef541c06a01017b99a272361dce23f57477963235d3180fab623e1241f6e901a3df5"
        }
      ],
      "purl": "pkg:npm/browser-pack@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-pack/-/browser-pack-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-pack@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-pack/-/browser-pack-3.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/.bin/browser-pack"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browser-pack"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combine-source-map",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d129aea0f520b5c5dea27eda3c6b2e92c6fc8769a439d3ff0d3b564e357c7686c205f6dff9daa5daec47a2bda7f9285392a302bb366f139082ff542e2485d04"
        }
      ],
      "purl": "pkg:npm/combine-source-map@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combine-source-map/-/combine-source-map-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combine-source-map@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combine-source-map/-/combine-source-map-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.6.1 used instead of 0.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb89d1934937a04a70501eff09a943ef1136cf8566b449e7ab418ed883d392ba284eb02112c5afb8b1798963f5757af096e922fdacf05d5d6f7bb82d62e3e576"
        }
      ],
      "purl": "pkg:npm/convert-source-map@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-0.3.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.3 used instead of 0.3.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inline-source-map",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44d9657415d9ec105c566dc78d72178b02b18a1d659ee29bcde2c1443481fea6aa93cfe0e09119063c69050321a84b614321afef272ef2bffc3ca1a005d22aac"
        }
      ],
      "purl": "pkg:npm/inline-source-map@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inline-source-map/-/inline-source-map-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inline-source-map@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inline-source-map/-/inline-source-map-0.3.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.0 used instead of 0.3.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f3f257932064bcfaa272c1688ef662b36b4849c5ec5d7886178431f0f5abd341c5d23401a4de18a244ca6623641ff5d3ab643ac3a601fd54d79fcee69c582f4"
        }
      ],
      "purl": "pkg:npm/source-map@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21248f626f06f7a8927bba6ef1f7d301b2cc7af311c7d485274313218d8e8cbf50a217fea1509f8b32aba4dec1376f6b2571bfa296f707508eed96a998cbafcc"
        }
      ],
      "purl": "pkg:npm/amdefine@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 0.1.0"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56d0af07d488421937685ea1f8df3911aa8868114801f67d0aef8d2471d5bdcf016c4727bc3705c3ab2a436750ad3e9294ead9ab7b48bf20fdf841aafe526bc9"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.4 used instead of 0.1.43"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.7 used instead of 0.1.43"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5b246c9135d205c77fd5dd84cc898f7f3b35e1a3211ec539b0ef789bfc7aad4fd2e5d555f1713c6770ec73a2e29a3f5050dea93aa088908d9993b1f8f58d7f4d"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.4.7.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.11 used instead of 1.4.7"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.1.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13df2d5b3a9286f2831a947631b8ec0e40d058b5b64df5940b5e47e2d3508482792ecb5af3897c9d418bf7fc9b96d1b07bec19cd63e97352a6776c103f86dd08"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.13.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.14 used instead of 1.1.13"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.6.2 used instead of 1.1.13"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f28fa6e505bdf7f51799be6d60e8d1c6548feaed31d3e9425bd46543315c51bc66f6bfd275c5acea9df435d30ac28511fab69c492d8fde526147d3e80034844"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f64bedc62f1587fae86b34472887f7e799878ff04f3fcc797ae3877f8dd034836bb25efcb7b1bd2ac68b44fa77b42ed71c1e49d0cd6c1913385a93ba09d0239"
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.0 used instead of 0.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7afd90cd2cd63d89b2f46baa7c856295d03839d7062de15942bab9cace91b62b85f914108995abf1364dc8072e557c904587c43be32ca01ff506e41584e26ea1"
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.0 used instead of 0.10.31"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.1 used instead of 0.10.31"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fda0831066ad1af67604893e1e62dfe227c2245c2f28535bf7f25e64f32e95f805ada727f5015c01fe463bc07f9b07948d2a1b952e489f471686aa5fb3fe4f40"
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.7 used instead of 0.0.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defined",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce9aa2093f1b3832eedd04a62cb89cf312676160458ce4aefdf0429b5f3da00893b4fabf3d26a734008a6434bb9204b208963b3fe21c383ce52288012bff5106"
        }
      ],
      "purl": "pkg:npm/defined@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defined/-/defined-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defined@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defined/-/defined-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "JSONStream",
      "version": "0.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97434ddc872aad97d9049a7b2560c9207b273d5ef2cc95aab18c50ccbf05c1dc7506610c8cbbafb5892ff8ff696efa727cfef9fdfe0c78366158d5388acdf6b8"
        }
      ],
      "purl": "pkg:npm/JSONStream@0.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/JSONStream/-/JSONStream-0.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/JSONStream@0.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/JSONStream/-/JSONStream-0.8.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/.bin/JSONStream"
        },
        {
          "name": "cdx:npm:bin",
          "value": "JSONStream"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonparse",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f0ed0ffc80547c8927a4522f48f87a9621aa7a9b2c2ea1eee14088376ee4d58ee66000b2a3e070269b45fa7fe4da2f873d3496efc8541d688da9a6be69e9d9d"
        }
      ],
      "purl": "pkg:npm/jsonparse@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonparse/-/jsonparse-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonparse/-/jsonparse-0.0.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.1 used instead of 0.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13c4027890dde31987906367a41559560271b7389983b4f575e84df90003e29632fc3dfd16d985bb7d6a06d35cd5a0b0636639fbe65a18077b61ff8d1bfab58f"
        }
      ],
      "purl": "pkg:npm/through@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.8 used instead of 2.3.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cdec42ac03936e39010971b2a339fb8614b76846aa76b739f66003d84ddd298cd5d6f16e1064358440c9376a10310170cb885edb3c8ba8f655f8095f4bc65624"
        }
      ],
      "purl": "pkg:npm/through2@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef62b185c2a2f1b02f1cffdccb25923fe3834b979fd03211b343b3ae1197c37d6ae357f5f5aa042c26ef778d858e1a72103c503118a20b9aeaf6b7c4e4fcd3aa"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.33.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.14 used instead of 1.0.33"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.34 used instead of 1.0.33"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.8 used instead of 1.0.33"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b29fec4fd3802cc8d15b57ca0e53deb926650d0a64a91780d29c89ba49e259b4c6a0429e7c7c61189ca71373cd85432570cf2a5888cfc1e7300b0e0b02b4b912"
        }
      ],
      "purl": "pkg:npm/xtend@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "umd",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "98400979c784c479db95c030377050b433d83ab4f2e002de061ea743d296d1c502774514ef5e2301f8a5da3bead3d6faec88b3c092224d514e8c4fbfe760f2bf"
        }
      ],
      "purl": "pkg:npm/umd@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/umd/-/umd-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/umd@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/umd/-/umd-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/.bin/umd"
        },
        {
          "name": "cdx:npm:bin",
          "value": "umd"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rfile",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68d793a58f20e83626a8fbda91abb6d81d128a9413b243bc16d617ce7f2a8385f86cdf44c481fc54086afcbf70ecdf07bc44987924b09377b81a65beacb2c0c5"
        }
      ],
      "purl": "pkg:npm/rfile@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rfile/-/rfile-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rfile@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rfile/-/rfile-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsite",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2f74d4455e7e6af9db4eaa37c5b66b6523d37679567b2ccc8457688a0b9984105bd283febd325e9bfd6536a85f16d672d16b4c224ab0d3dd8e63387642c0a3d"
        }
      ],
      "purl": "pkg:npm/callsite@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsite@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b1c7f23fc0b8f1b6bc8306daeb6f464dcda60445559a1e92745b402b9bc37897c6fe8e25ff539c8a72c8f4cd0a45f54b8a375bb3f341144ceb9d38de8e3ee69"
        }
      ],
      "purl": "pkg:npm/resolve@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ruglify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5df463d5825d9bf82764dbe6a50e4bfb66064478250c630f80945b8ad802c42dc6cca55017fb7e8a3d5a35c360d809c45c6b4b1c90f0a125ab02add3526d0456"
        }
      ],
      "purl": "pkg:npm/ruglify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ruglify/-/ruglify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ruglify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ruglify/-/ruglify-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be22e4fbff06d339b668ab75249015733e49ff9cad76235a22c2a0aeb7b7caf4948f0546e9952e8c61fb1364e23e28195302d809eede6885043f66646b65493c"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.2.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/umd/node_modules/ruglify/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c2c7475743356d4828363a063f6cef618ccf5c5785d8c74f5354afacdfe1619234fa2e8bec2defa93ccce959ffbac972bf8548b3b36814a13c378c733455a4d"
        }
      ],
      "purl": "pkg:npm/optimist@0.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.3 used instead of 0.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.4.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8647caeccd933e3834d6883d6122ef76d27038c159f1ad4e56e2bcfe1f33c446befa71c87314be31201c48cd62de21456f347d55ae9cc1a619623cde00152e7"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.4.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.4.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.4.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.4.19.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/umd/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.24 used instead of 2.4.19"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78091da0ac54ebf2e42830732e94feb7a15fe44b5f485e30c7559f2623c4115ed634b9c36915e4d28572b2210f9b6eb6ae869a72119ec7052ff785a14a03794d"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.6.4 used instead of 0.2.10"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9f0b00e3d2f47d453c2dde913382581bdd98267171ede838c6ddb8c9bf33f04cbfb9cc3436321992cc0713cb4193890b828ab892597bd6335fcd84a757ba840"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.34.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.7 used instead of 0.1.34"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdbdacd65631db106d520cbeb5af9bd89fc62d5511fb09a920dc0778f98f4613ac215086db00f3289d27d781ac947d4189fb2a57348ec1085168202c67f9c8e1"
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e63dfcd84e31412b3bd69ff1650b14d4fb510361d73c08d7d04d0392818bc7034048c38a5fa03d76857536b6668fce6ed8f8eabb3e34daaa27073cffc8b3db3c"
        }
      ],
      "purl": "pkg:npm/yargs@3.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6399c1e9248287d372be4d3f75f032407d158c725a855023fe1fc306c91cd52aed12deaa220fda35c0e8dab7569ce5375941505e5ef18dc48731647f3a2af67"
        }
      ],
      "purl": "pkg:npm/camelcase@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.1 used instead of 1.0.2"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.1 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8e95b8d349f056caa33ca053bb4d873a0e0088893eaf802899f7bdc60c0f7cc557fe0ce5d566f60bcd1ca2d07109cb9277d7febd95e97801e63bf0e69ab012d"
        }
      ],
      "purl": "pkg:npm/decamelize@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d694cf40329375deb5a3394a18d0a384d45df8a3e680b4866b79994c7a0e962686704483f06d4f5e187b7357e088f8d56cd55f832d856b0e0123cfe6d1c0bc32"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-resolve",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "078bb035117098e347d4b9a842db2d8f0dcc73942704cd57c2632c6b6a93ad6d35165a3c6f88a671d5d935becc97ff25c6b600a527f4ffe3ea3179f62d9aebe8"
        }
      ],
      "purl": "pkg:npm/browser-resolve@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-resolve@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.8.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.11.3 used instead of 1.8.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48c70bce2d7025b87198bc8435fcb5e37d6f9549c88ca4f7b18d810c40b467af1ed59a634665c2757cd82fe3f91f08b1103d862084d478cd4394704cf2ad7ea2"
        }
      ],
      "purl": "pkg:npm/resolve@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.7 used instead of 1.1.6"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.22.12 used instead of 1.1.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-zlib",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7d384a6aeef5a0b07e9692f9012500c5bc94b5b8f71b14e438bfd094f37f5d3be6595d464ee97a44ea1342aaf948223fb87d9bd1889e83b00437f361b08b24d"
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54ac95d7a89eee11d3c65e0a80897731870d042522825d69c6852909aca667a1156b83cd348410c2c488b9d490921ff7ed57036eadd1e9d0e8a396364416ba62"
        }
      ],
      "purl": "pkg:npm/pako@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pako/-/pako-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pako/-/pako-0.2.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.9 used instead of 0.2.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "2.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f969bfe6e24ae21e078e118b4829364b1eb925b36c4900f673db10a127dabe6ab952a90b937d2af7a6528e556ec5c53a3f72bf6af1ae4103a3bb02bd2ffbbfd"
        }
      ],
      "purl": "pkg:npm/buffer@2.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-2.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@2.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-2.8.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.8.3 used instead of 2.8.2"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version of 'buffer' is out-of-date. You must update to v2.8.3 or newer"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2731f18ec1efa094a4267e2f6dacbc2548c78bb9392ea4a43ab1cc2b9513f84dd7d947cee4c19c0c04d60ecfcc5db57a9e7dadae23bad0cba9fc1b1c6d605bf"
        }
      ],
      "purl": "pkg:npm/base64-js@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae20a742bec6eaf52f1c7aea23d8f11365c3bc7c1e956a54871e2107dd6d562124795d1c11160ebdaabeb4c4b099e1b608b82a69a236f6fa5343d355800aee78"
        }
      ],
      "purl": "pkg:npm/ieee754@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.1.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.1 used instead of 1.1.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-array",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "831899fb2feeebb033a5e166026a3809bb4c13f6ecec9d82fbeb2ee73433bd0c9ac54a95ce487af4323e8cdf8a66e48ee89687e9320853a33a2e1ab1323c44a7"
        }
      ],
      "purl": "pkg:npm/is-array@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-array/-/is-array-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-array@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-array/-/is-array-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtins",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fcb8218a734ff668b56dea89adf09c43441a1610c924bbec057acc678719ede0dca05591bdf73ab1a3b7222bc79e6eccdc78a6a61a85222dd9170a0190cab43"
        }
      ],
      "purl": "pkg:npm/builtins@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtins/-/builtins-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtins@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtins/-/builtins-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a17b52e62efdc6ddcd17258bbe73cf0c09120fa9643aeea6aa298d4abee378b8f0237d48fecb886f7296769023eb8e944dca4956e1da40659f1aeef3a1e74b6"
        }
      ],
      "purl": "pkg:npm/commondir@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-browserify",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76e4bb54fe69bdfb0d2c3bcbd4ee153846f0dfb008dc0e1951061e9af0e59e91ab36ef6da6b47b0585a90d8c02d1789ad19c73e59ba976222b529d061f56977e"
        }
      ],
      "purl": "pkg:npm/console-browserify@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "date-now",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02c125be8bf72e8341eed7f9937ec7da361207e6593cc4f9b06d908c909c76557972122fea1b4150152e8b620a46382d2802ad08137b65bc1af8cb702e349e37"
        }
      ],
      "purl": "pkg:npm/date-now@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/date-now@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "constants-browserify",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14bf9d8834bd00a47904003633e18d93c9671fae2d444df37a94c6f61b9cc5cee8d382e0091864419845eeefce287653f0b2d14feb19122f6a1735d4721abda4"
        }
      ],
      "purl": "pkg:npm/constants-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constants-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-browserify",
      "version": "3.9.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ba8c0f5ebb25447f973a7574982153b749d1529abbd13eb997b510c5490843f1fcc4d15db4c2a1972e96434c346e9f17c3b70d9768327aa5a5e0e2a5e78544e"
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.9.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.9.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-browserify@3.9.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.9.13.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.12.1 used instead of 3.9.13"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "browserify-aes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72a11f8792a2f412a20647c5cbdaa21d00a00047d82c073bef9403b093cb1ca83f76edd4717a8ab66229fb33bfbbe7de5ac82c9dcd7bd04ed5292e0aab4808a9"
        }
      ],
      "purl": "pkg:npm/browserify-aes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-aes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hash",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0abd8dd8bd9aa64dc79f9be9989858b98225cb96d6b60bf15fc99401deb01c3f47b57711cb17c8534bafb8db139057d389d1f2f8a98c9a9845cf63435436f652"
        }
      ],
      "purl": "pkg:npm/create-hash@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-hash/-/create-hash-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hash@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-hash/-/create-hash-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ripemd160",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71a7815d5a87f99d40e08755cb878ebd92b1788fe8109fa6c20c3163066f4ec08122cb4e8f1861fff6b18d0e2a035de90b195d802170118ac86af1c955e3e86b"
        }
      ],
      "purl": "pkg:npm/ripemd160@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ripemd160/-/ripemd160-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ripemd160@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ripemd160/-/ripemd160-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.3 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sha.js",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c824d4056a95c71508fa0729a81c92081feb724eb46e0669b8bddf24e04a94d623cb57c33e97d36b81faee989215ff7957c0994c70a09173aaaec83774f49d4e"
        }
      ],
      "purl": "pkg:npm/sha.js@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sha.js/-/sha.js-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sha.js@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sha.js/-/sha.js-2.3.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/crypto-browserify/node_modules/create-hash/node_modules/.bin/sha.js"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sha.js"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.12 used instead of 2.3.6"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/shasum/node_modules/.bin/sha.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "browserify-sign",
      "version": "2.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53d654c6c0f7976fea131dee384712ac0677d79c577b2088d5f01b4c1475b60e073ecf03a4c7dece4f80b7c0196cc484e25cc7213a3ad9e780d43d1eec48e0f7"
        }
      ],
      "purl": "pkg:npm/browserify-sign@2.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-2.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-sign@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-2.8.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.2.6 used instead of 2.8.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bn.js",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01b4b9ce1a73bb6b806694b20bdc0c21799a1ca45a91d7f8ae7f24a8048e7b9f4dfefc468f0febd146db095516f983dd41b672a8e73c9dede6c649866a7603db"
        }
      ],
      "purl": "pkg:npm/bn.js@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bn.js/-/bn.js-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bn.js@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bn.js/-/bn.js-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.2.5 used instead of 1.3.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.12.5 used instead of 1.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-rsa",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edce3262687495572efa01f3c946ec202aaa953c1920c15f80550046b886690ebc99e4a23ead01a56e0548caf1b3a729b4d322caebb11120051f0a77c2fa52cb"
        }
      ],
      "purl": "pkg:npm/browserify-rsa@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-rsa@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.1.1 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "elliptic",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc8ac0c2acaca9134e55cd226faa3afbc4c4772be43ca34575fce358a38ae5e17f8ea59c5e9f889df6da941e88727f90b5c7be0fbe4772733b363d24785b57ac"
        }
      ],
      "purl": "pkg:npm/elliptic@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/elliptic/-/elliptic-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/elliptic@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/elliptic/-/elliptic-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.6.1 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brorand",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5be35d36340d5574d220eb300b433813b5c1755ff4f37138a1f3674ae4536bff3dabae8b9f6f50b972580ceb3a58b6bdc6beefff980c209057cada5648eb482"
        }
      ],
      "purl": "pkg:npm/brorand@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brorand/-/brorand-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brorand@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brorand/-/brorand-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.0 used instead of 1.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hash.js",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14eb9c49b8ce721b2217c59ce6c90b414fdd7338fec36e6209ffd64064d529a17cf6329bc338641abadc58fe905225e538f5ef6ed15bf076156a46679c5c1c31"
        }
      ],
      "purl": "pkg:npm/hash.js@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hash.js/-/hash.js-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash.js@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hash.js/-/hash.js-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.7 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-asn1",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02ebc691ba93b215bb0b3f639e9293777e7eee6e5bf7a2e8af35c10ed2919aba77425514caa345b34d55e56914e04bda96102abbed57541cd3585818926474d9"
        }
      ],
      "purl": "pkg:npm/parse-asn1@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-asn1@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.1.9 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1.js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44c7710cff6c9e77e1e3094cc13fcf93f22441c25a56729b3d939ff26d61e1e6e59655bf4f5c0208711bd371df3d1533bf13cadb630b7753f01e9a2f30e2ca2d"
        }
      ],
      "purl": "pkg:npm/asn1.js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1.js/-/asn1.js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1.js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1.js/-/asn1.js-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.10.1 used instead of 1.0.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimalistic-assert",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d313ce803bd6f6c7c0f4eac71c2b92459863fdef8bf364462c57f46fd12cbda8264291a7458b73b5322eab5251ddb89513bbbe32eda3599a92c6f67c09a32b05"
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-assert@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1.js-rfc3280",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a54672600e7efbea2f17a4d2c2789eaf16e3fe1cf30f3cee343796c03b00989f52e7ff96c65dd65ed8ffb97a683721f6c90e154aa492332455dacdc8990aa3fc"
        }
      ],
      "purl": "pkg:npm/asn1.js-rfc3280@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1.js-rfc3280/-/asn1.js-rfc3280-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1.js-rfc3280@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1.js-rfc3280/-/asn1.js-rfc3280-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pemstrip",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd20749ca9e52cbb080f38a40fc303ff61cc86924383d74295eeacc5a83b19e7fca68afc5b993cf891408331f3cf9e87eae1b004d89704f651edbd9c8b6ee52e"
        }
      ],
      "purl": "pkg:npm/pemstrip@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pemstrip/-/pemstrip-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pemstrip@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pemstrip/-/pemstrip-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-ecdh",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "114114d9a8ef21b756f65e45ae8736615a99eed40cb0fdb135d364e98a98901a185f6f907e0a6a562298cea8018a2cc49ea1ca9886ad5b09e6ba194593a73b95"
        }
      ],
      "purl": "pkg:npm/create-ecdh@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-ecdh@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.0.4 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hmac",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5808795f4eeb148334119d7aeae9c438031dacf59c83b03a6a5cdda8844d9cc9fcc2826765f29414e069008cce133ae7d68b918d1bfe3be81c11275d9cdfd797"
        }
      ],
      "purl": "pkg:npm/create-hmac@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hmac@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.7 used instead of 1.1.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diffie-hellman",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ab8cbca55c16f6a1c861e601df3fe0f20af9e5caf72205f97afc66ffbbe7ae8f7e643521cb1c66cc09447b3b19e6a15ab5301dae3e7df9445cad05244cdc6df"
        }
      ],
      "purl": "pkg:npm/diffie-hellman@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diffie-hellman@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.0.3 used instead of 3.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "miller-rabin",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b708cfc10bb0f0a478fb6f4948f976920b2633de51713c9a5f9615ffd4d7c356f1cd2a218bcc9668aebd54476fdbed7be0b144c094a0874fa395eaeeef89644"
        }
      ],
      "purl": "pkg:npm/miller-rabin@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/miller-rabin@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-1.1.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.0.1 used instead of 1.1.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b220add9db8e7596e6be093c2032f85344985c8f32a4110a5aea2bd2a5291c1580c8e0ab5d0bd221827e54ab84a685f7ea6a19d6902efa65e4c1454056cb2eeb"
        }
      ],
      "purl": "pkg:npm/randombytes@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.0 used instead of 2.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pbkdf2-compat",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "503be886d1a51e4fa7bcdf2e88d28ccc96d9d9e00b4eb446c4bc61d8c66f097c25dd99d75d77ff2ce78c43ebc6b74c5477c408523f708d58ce5043357d9c39a3"
        }
      ],
      "purl": "pkg:npm/pbkdf2-compat@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pbkdf2-compat/-/pbkdf2-compat-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pbkdf2-compat@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pbkdf2-compat/-/pbkdf2-compat-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "public-encrypt",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7cc1d4cddae7e6102bc339b4c866a7c7b867fb64cd6c837bd8dc8d6e510eb9838fee09fb0e4922e06e7cdd2a048607932557297a050e547082bf1e47f0e687b"
        }
      ],
      "purl": "pkg:npm/public-encrypt@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/public-encrypt@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.0.3 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "encrypt"
      ]
    },
    {
      "group": "",
      "name": "browserify-rsa",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ca8af3a202fffe552d551ebb9bd9b1985d0ede1f3e6c123e2b10a387e7d5d8e47464060f8a674484d5a484f25c18e2d6efa345a9cfffd072945ac012d701d8e"
        }
      ],
      "purl": "pkg:npm/browserify-rsa@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-rsa@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.1.1 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-asn1",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70c46f888da2d23a80096112e3c90433b7695aee02049d641f3192921abe5486cd9d2777fc22dad1496ae0e60b268eee430c0c38bc9ae9043b68c4f304ddceed"
        }
      ],
      "purl": "pkg:npm/parse-asn1@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-asn1@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.1.9 used instead of 3.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1578327b626bea8124d354bb8264ab1eb3c4435a27b51ef0c25fa762267c878497947566d0361d6bbe0120f707cf6b36a8fcf8fb7ef921c033d6fb162f075d81"
        }
      ],
      "purl": "pkg:npm/deep-equal@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deps-sort",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732fa1dea9c5ee1fdca7b2579df6a47c4e3b5183c7f2a23551a532c3d6ade0abaa26d03cac536bdd0a7f5e3a69a426e48af1bfbb5ae4c7ac12aefa58a19038ff"
        }
      ],
      "purl": "pkg:npm/deps-sort@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deps-sort/-/deps-sort-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deps-sort@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deps-sort/-/deps-sort-1.3.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/.bin/deps-sort"
        },
        {
          "name": "cdx:npm:bin",
          "value": "deps-sort"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.9 used instead of 1.3.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "044487ae62450888815bf3d1d3c243edb76d06179540c77d19cbcb12adc00ac654e97dc8aefbab6703b4c60eeecbf5379eddcccba1f30e3356713ea23b282a5c"
        }
      ],
      "purl": "pkg:npm/minimist@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.4 used instead of 0.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shasum",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c2505c91775ea73f2b35abd0265116d07729291e3078b6b401117fac074e82fcbaaadaf1590c9310ca4416334db582624e66d6c19b57e393cd4032cfafb914"
        }
      ],
      "purl": "pkg:npm/shasum@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shasum/-/shasum-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shasum@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shasum/-/shasum-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cab43fd0c66eed59d66a26895d102edf1744b8d6fd2659b79a5c6dfadfbb2d3967f21b14e0593604db0b5f2a68f3a6fc6fd8c036c73c6c5ce222c14a645fa43"
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6bbc1935922e37559a6d741239ac8946e183b3c9e1ff59e7d0b79ae3d60adab0f9f88a265629eb7c9e481ce0696c03295aced9f4a997d460e893b0048915d34"
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.1 used instead of 0.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domain-browser",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cccc759310db36a3021b3c8e33661dda704ffef01aae953b6a2857baa2f8306a54dfeefef031f1c95aee7c54a5c3b01494e6b29902453f975a822791cacf3990"
        }
      ],
      "purl": "pkg:npm/domain-browser@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domain-browser@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.1.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.7 used instead of 1.1.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f80581c2319a76d92cc633904850e13cd41b79dee270d5c0a53e3ed81369b17cdc0818889ead87f575b43bcb1f1c568f9a7411b3b720fcfd1f02bd88590496d2"
        }
      ],
      "purl": "pkg:npm/duplexer2@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cad7d2b0943268f17b1c7a8a313432b5a4e6ed713e38f97b5ee95fe341ce1af9f1ead6a128b93872c97d9e3e64b4852f11702ba5991c7383e4fc8e22ca00515"
        }
      ],
      "purl": "pkg:npm/events@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events/-/events-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events/-/events-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "234ad359429264ac4f4880086aa8525d333f0e2208eb06a67beac40b77050392ea9abf5899d2fbcfa1e3f7e6dd5ad4efa18d52bb8fce88c2e66f7ed8ec9cef25"
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "7.2.3 used instead of 4.5.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c8c3865eb7a076003e99eaf880bc8659f8ff831d2fcea997b48637613c5a420e0e65d9381acae088509ffc6f7a91542dfda24327240f0de6ff36d411669d77c6"
        }
      ],
      "purl": "pkg:npm/inflight@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.6 used instead of 1.0.4"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3737db69aa10bf3d890bf0ff623dc6662d05246d70f62dcaf41a7df56b37a74c6b88fca70bf61f45ca68db3a15b8876ebc7e1bf3eeaea78a201b19ea6a348a84"
        }
      ],
      "purl": "pkg:npm/once@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.3.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.0 used instead of 1.3.1"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.3 used instead of 1.3.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e36875776e675ba1bf37b975e8ecf8bea08e2c81686c504ec19ac16250b127f42e4b6a3519d9f53f34a88989dd6e72fdae0188199e909f4f40229ca1ae47a97f"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b9c24abbb17a2162a57ceab6d741067c8dacbd2e7c35ccc5a5bab90cb0739f5f8e338880715d4c5fe268cc8aa21a53f2641b77aefd6fae038053c1035018de2"
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.10 used instead of 2.0.4"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.5 used instead of 2.0.4"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "10.2.6 used instead of 2.0.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d6d6df642f79225f3a2f1e712060db9832717e8470754e5c8adb0a31df674fad646fc0d109957cf735d07999d8c52b53e89b6daa555be91973768480969af1b"
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.18 used instead of 1.1.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.0.9 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92e460974c3241ada9994cd5572550a74134e29ffff6eec9e878b41ddedfa45d8b7b5c1a51850f98e729e884d734162d05fceef73c3e6931b978b2df6161ddd4"
        }
      ],
      "purl": "pkg:npm/balanced-match@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 0.2.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.0.4 used instead of 0.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-browserify",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22b7ff2c95e6137701cd4d5e691e3e3445fa6e654baadd709260e203b901c07ef399bd03f240405ec0e643cf21863feabfd88464a9721b1fe1acc7058bcb0e1f"
        }
      ],
      "purl": "pkg:npm/http-browserify@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-browserify/-/http-browserify-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-browserify@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-browserify/-/http-browserify-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "Base64",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ade1845ac8439930d00ec09e73f1ddb8e3bd5b28fac8c3aea4c7e121fdee80dd530e52b63505b80c3252a8d36da77f3448d72f45f5ed3bc1d2090a2dd1dd1233"
        }
      ],
      "purl": "pkg:npm/Base64@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/Base64/-/Base64-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/Base64@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/Base64/-/Base64-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-browserify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a2ffe55dc4b416a7405c34c00c4d7940fd7d6bf1dcc2761ab99e017af894d69824ab4699eaf3f3ab324fd954511efb99bf80ce3e9cba9c2bdaa334b56f9f3bf"
        }
      ],
      "purl": "pkg:npm/https-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-browserify/-/https-browserify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-browserify/-/https-browserify-0.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.1 used instead of 0.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "insert-module-globals",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "047deda98d3c7e2a64f5f8b61f2d1bee81cc3279545383ab98e2d713b24e169fe21be9aaeec5432ba84d9c6b849c552ba9dde72462b33d303dca18562e3fb684"
        }
      ],
      "purl": "pkg:npm/insert-module-globals@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/insert-module-globals/-/insert-module-globals-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/insert-module-globals@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/insert-module-globals/-/insert-module-globals-6.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/.bin/insert-module-globals"
        },
        {
          "name": "cdx:npm:bin",
          "value": "insert-module-globals"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.6.3 used instead of 6.2.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "JSONStream",
      "version": "0.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "855805d0ec7502dbf1266a70cdbd9d384533da6b3527c0d955ba8a5122064b23c13f2d0cbb1089b10c63f32e5d69d4f3b2323e4f84e9cb28573913ddcf5e66f7"
        }
      ],
      "purl": "pkg:npm/JSONStream@0.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/JSONStream/-/JSONStream-0.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/JSONStream@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/JSONStream/-/JSONStream-0.7.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.5 used instead of 0.7.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lexical-scope",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4049fbed263065e33dab1cf6aa79b12cbf54b4744cc3b65ab45885957e71567c283f7c252cab47913672aa538da6d9f035a55f87a904c1dab2c98cb5098e45e"
        }
      ],
      "purl": "pkg:npm/lexical-scope@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lexical-scope/-/lexical-scope-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lexical-scope@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lexical-scope/-/lexical-scope-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "astw",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f64d9b9b6c4f48fe215c7f63f567e786574279f78f4e700f1a8871bfee1230c59cfe210d2893fd007dee9abbdd417174bb11296bbc4b0f638ef4d4fed635ba08"
        }
      ],
      "purl": "pkg:npm/astw@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/astw/-/astw-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/astw@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/astw/-/astw-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.2.0 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-fb",
      "version": "3001.0001.0000-dev-harmony-fb",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b74458825418b2f0a74eeaafc2fbc05088ffec464f17b21054dd01c70cff2d3738d8c11dc52813889aef8f5df5613e864bd092ad24b04039694330208563c49"
        }
      ],
      "purl": "pkg:npm/esprima-fb@3001.0001.0000-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima-fb/-/esprima-fb-3001.0001.0000-dev-harmony-fb.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@3001.0001.0000-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima-fb/-/esprima-fb-3001.0001.0000-dev-harmony-fb.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/insert-module-globals/node_modules/lexical-scope/node_modules/astw/node_modules/.bin/esparse, /app/node_modules/angular-benchpress/node_modules/browserify/node_modules/insert-module-globals/node_modules/lexical-scope/node_modules/astw/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0a7510d1222b03fdd7d304aebbf101451308b5a08e50f14e090aee252524599fb4254e296c5d7944fc9cad4d8e7103c6c02000e4c17694f15b7acc4f0297357"
        }
      ],
      "purl": "pkg:npm/process@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.6.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.11.10 used instead of 0.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "labeled-stream-splicer",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dca0633d19d7ad80b98768c47ff77a84eecb725fb7f10cd15533b21c0dac173655318c2c505b9e8e5ace3300239b3d7785506bf6bb834b5470138604cfc3f9f3"
        }
      ],
      "purl": "pkg:npm/labeled-stream-splicer@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/labeled-stream-splicer/-/labeled-stream-splicer-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/labeled-stream-splicer@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/labeled-stream-splicer/-/labeled-stream-splicer-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-splicer",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd900d31c7ef1ab39363d859d94f4756596392611d1c8355368a1a08dc5233aa103c208b21ab3d6b2d1c8de4595cc0041daabf2d05f601215e6c02fa8759d40f"
        }
      ],
      "purl": "pkg:npm/stream-splicer@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-splicer/-/stream-splicer-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-splicer@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-splicer/-/stream-splicer-1.3.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.2 used instead of 1.3.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexof",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8b41bb84b275cf40c4f1db2a25adabc9c8fd74198d2a05c1be8b57b596176a453da22bdf07d523d99042dbbaaa79fd94e7cfd92f06a5c5ad57fd10c27641ed56"
        }
      ],
      "purl": "pkg:npm/indexof@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indexof@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-wrap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffc9f432bd744be1c6285ca0438d99e342485f069f3c7dc0ef6a709a5342953860b08995e4b249882b9ee497b56acc70634f36b18c6affe913c47ea74e7d30de"
        }
      ],
      "purl": "pkg:npm/readable-wrap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-wrap/-/readable-wrap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-wrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-wrap/-/readable-wrap-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc46e969e48c1f1733a53cced4a90c1e3042d5e9d303af288de699186e2da2a7404a96fdb78c5465a60506adbff4e1e8e674c615549877873dd74391fbac316d"
        }
      ],
      "purl": "pkg:npm/through2@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "911217f38bef80b6f390a0f5c0c902c53b4dc2b0457e05c8cc6b8528504848944370ccf837c1419650c49dd264365e87ac5b90bb349b0045a99ee63fc9d3d55e"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.0.2 used instead of 4.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "module-deps",
      "version": "3.7.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b0462fd8e546c54cb33f2c4a3cd1c22c8ab3c63a83c032b0b19a4855dc18b6ba17d605920750a427f447ac4cd30ebab9fbe2105389802f85eeb8490fe477992"
        }
      ],
      "purl": "pkg:npm/module-deps@3.7.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/module-deps/-/module-deps-3.7.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/module-deps@3.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/module-deps/-/module-deps-3.7.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/.bin/module-deps"
        },
        {
          "name": "cdx:npm:bin",
          "value": "module-deps"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.9.1 used instead of 3.7.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detective",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4af887077eede0be656807cb7f0c0e6d940fc618556daeeecccc6a3f49eab06569c87442b9bc82a1efa1c18b85462af79939baf444bdcee616a7bc565eb4e7e8"
        }
      ],
      "purl": "pkg:npm/detective@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detective/-/detective-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detective@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detective/-/detective-4.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.7.1 used instead of 4.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1149115363048a8304cdd94630d968abbf5c6334e4ea0ff9be0d9291aa756c29faf36db9c9e4086f61514a161e2677ddd7f60bd80b8bbf2256c1b5fa91b207b9"
        }
      ],
      "purl": "pkg:npm/acorn@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-0.9.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/module-deps/node_modules/detective/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.7.4 used instead of 0.9.0"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/syntax-error/node_modules/.bin/acorn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fee40d86a5ca2d4d3f441920eb87a3a4bdee10535b51a7892d6f709dbad12cd9edd912463e3489a663e2dc955e0d54a3884dd36c98e95d4a6aa571deed959ce"
        }
      ],
      "purl": "pkg:npm/escodegen@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escodegen/-/escodegen-1.6.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/module-deps/node_modules/detective/node_modules/.bin/escodegen, /app/node_modules/angular-benchpress/node_modules/browserify/node_modules/module-deps/node_modules/detective/node_modules/.bin/esgenerate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "escodegen, esgenerate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4bd55b3c353469d144ae90da8b7a83923abcf86d3938db4acdcc8dacf2a0fd929afad7fcefd9d7d8a7b1354f796f7d54a1326344b2273411c71e314fa0277b95"
        }
      ],
      "purl": "pkg:npm/esprima@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.2.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/browserify/node_modules/module-deps/node_modules/detective/node_modules/escodegen/node_modules/.bin/esparse, /app/node_modules/angular-benchpress/node_modules/browserify/node_modules/module-deps/node_modules/detective/node_modules/escodegen/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/dgeni-packages/node_modules/.bin/esparse, /app/node_modules/dgeni-packages/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-jscs/node_modules/jscs/node_modules/.bin/esparse, /app/node_modules/grunt-jscs/node_modules/jscs/node_modules/.bin/esvalidate"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "1.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db9c357cc5d0ac6768aae5a749c5d919c90ebfe59eb3e2439ee37ffbb7b1dd26ae1514bbdabda514379cd0428fb76603d70509fc8adf11ec7ef72a7885f48e24"
        }
      ],
      "purl": "pkg:npm/estraverse@1.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-1.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "446d599144fb885246f4b487afb283bae31296e8df793b4c3487089d4471280c6132dc10848dcdad0873dba81941896c61940acec9f0b692ab14a8fd2bd42ed4"
        }
      ],
      "purl": "pkg:npm/esutils@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optionator",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d4afb68193f902227004b25faac6ec38391a5ee39f1ab4329734b872bcf503e0d7e7b09b1b015897d5bf676ffd2b4bada53bc70815dd55a226972d0f8cc9b3b"
        }
      ],
      "purl": "pkg:npm/optionator@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optionator/-/optionator-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-is",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1adc403781ef05a7216739b83a75aa738e444a950233091872c8e7b0fb36dc5c096ec3be938b7493d6d00a03a6cc89691cedbcf963cafca45b464d030c7bae0f"
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-levenshtein",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83e44f68cde2e206939464888c8b592348c7190bc6783cd8b2b280b8eab629c81871b10539959d5790cde5a1159d8483755c264f2b12d44432a21b0ac3028988"
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "levn",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9afa7e34efbe607d01f9ef1c0bf4af27193a93967d360777897bb3eed993f2f642c90663ff9488d469053a264618f926e7058623d494aea8807cfabb0491fed3"
        }
      ],
      "purl": "pkg:npm/levn@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/levn/-/levn-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/levn/-/levn-0.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prelude-ls",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8155abc605b9bc7f28ccb296f3142b5452c6cbb565c99c2d87b8c9374d12ca501d90c1d670b6aed07769f0fa8fe24b6e06e16ab5b6972db4bbf8f73c486afd99"
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-check",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6e6ac22615021d47f5933cac83989c900207d52860eb0de910f5ff7c91df90ac43e88d0eb39b2331d161f7d0578606cd28bdc57bea71f67265982f6ec5c3263"
        }
      ],
      "purl": "pkg:npm/type-check@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-check/-/type-check-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parents",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "997285df192852de6d7760e8c692e6b4e999be4a3d55f169c11c242831d236f826a4b01e068d7c60385c3db07326af902c21cc6c639fce26b6717e14fb4bfd32"
        }
      ],
      "purl": "pkg:npm/parents@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parents/-/parents-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parents@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parents/-/parents-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-platform",
      "version": "0.11.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "637d1d07aada6f503f9df10ab19c66af4d67528b475f473f662200b024dab447b50a64b93e6e477bb7d9d7de5b3d3ed176aba868bf252f11423108bf6d2ec826"
        }
      ],
      "purl": "pkg:npm/path-platform@0.11.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-platform/-/path-platform-0.11.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-platform@0.11.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-platform/-/path-platform-0.11.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shallow-copy",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fa8b866956e53107d87981f0b13e2bac29892a4cc3a311b06ce3031a15b91f89ae3216ff7650a67a0dff165dc29b9f4f0934bfda6ef83716730039f6a40ef53"
        }
      ],
      "purl": "pkg:npm/shallow-copy@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shallow-copy/-/shallow-copy-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shallow-copy@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shallow-copy/-/shallow-copy-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner2",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ec33b549f0559f2232a3dcad5234b25688d3e5ba75658ea1de98fb1d4b3a3f071149dfebf2604e1db470602ee76c745a90accc2b2369e4758946fe0681585eac"
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner2@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "subarg",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e87518df5b003c374d053e06cb57366b699fa7346214f30eb11f5e424a8ed9930854bd7598fcf2c0b82c49219827e51589d11f76ce9712c8784676620db33ad0"
        }
      ],
      "purl": "pkg:npm/subarg@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/subarg/-/subarg-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/subarg@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/subarg/-/subarg-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a8b644efc5cf93c0e9b921e8a6f159d236f0838c22bd4bc1b7b1c279d19b61b294b16bb8f1e748e485876eb80b408ef7c35304a03b07fcf887fdf4094e121cb"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e392e5bbe1301cab406584cf3d59f75d91c181a91630ddeba24844bf986ee7de973fe70d82994c83e1a3fb59e602f8fe2f42bbf8de3dcc12b1e6b6a1e6ed1021"
        }
      ],
      "purl": "pkg:npm/through2@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bcc34acebdab1cff43a7f7b53501672d0970961a7d2ff2dfbe7b15747c4dd5ffae820c952378b4f2e0f5e063ef093a0f91db117f23ea232606988939f15f7c65"
        }
      ],
      "purl": "pkg:npm/xtend@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9dcacbc3e5f9e73edb925e4f9d4bc7c052bd15c1ae158a3d82d8f0b365ed4b32fe699f2d9bcdf43fad1627475298555a49a95689e5b9303ee411d9d775af7227"
        }
      ],
      "purl": "pkg:npm/object-keys@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-browserify",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69989c25971cbf158e6740636b6780721d8bf11209581b9162633c1b097f26336d465b47d08b5ccf8787fc44b2b8859fb1ef1c73ddd909fd17af38572b61c40c"
        }
      ],
      "purl": "pkg:npm/os-browserify@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parents",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01291d8c53d2da7af1ba3cd20591adf1908a786d3f2b665954abdea97b7b5c6b577eefacb279380d08672bdd4a46fb7cddfdfa2e37f139fc22d1cbf5f917b478"
        }
      ],
      "purl": "pkg:npm/parents@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parents/-/parents-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parents@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parents/-/parents-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-platform",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9d2b554a645630cb4993d89be29897f1b79cfa67ab2305b2dfb0532825ccdbc19fee9740238295cb1e29d4cdc95fe3f5d80bc9adb161ae144459f794679bcc0"
        }
      ],
      "purl": "pkg:npm/path-platform@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-platform/-/path-platform-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-platform@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-platform/-/path-platform-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-browserify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "580de9c62d6895441cb25f365b9efabe4aa15121a9d2e06daffdfcd69c71e565cba77342f8007df61506dda196ec7d0a83d3c5af50fcc2fd6225e2027bef4c87"
        }
      ],
      "purl": "pkg:npm/path-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-browserify/-/path-browserify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-browserify/-/path-browserify-0.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.1 used instead of 0.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83b2efdbfeec65a4b9a0d12579b46ab1de345bf9344024e6abc59e359ff0dcf553a91b33d20884477b0cb05417a1b8befc69aecbfa9b9e4b2b87bea8db50c40c"
        }
      ],
      "purl": "pkg:npm/process@0.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87fbec7312cfbc8da5ee4ff474550a6792394e030227f3e5f89eabc3becf0ee40ce940297ff19a455923bff6129b693e7dba7b630f1dc6ca1edbd0e8953ee1ef"
        }
      ],
      "purl": "pkg:npm/punycode@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystring-es3",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efbdf1843427641305a1b122cedbfc2c897bd1c87931217f8d4415961c05c8120baaaf7a6a79a872d548633f99469d2a6c22804d39fa7afd36337afb19ae6fa8"
        }
      ],
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring-es3@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "0.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf19807227c38cac6651b93b72141d2a10d29fc9a5d3c83e318c94dfbc61117069f8df3571f6d8b26e1ed069fd8ed2db02f6d1f30f0ec74f71a9466d3ee0a878"
        }
      ],
      "purl": "pkg:npm/resolve@0.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-0.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-0.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shell-quote",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b845b3ef06bdbe70a2f70e26bca64c81b1c59370c22a32d0959732d2d271507e0dc198d1acf3c75c060812dd93989b3ad340dc823d19ddf64b64a54f55d18d6d"
        }
      ],
      "purl": "pkg:npm/shell-quote@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shell-quote/-/shell-quote-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shell-quote/-/shell-quote-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-browserify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7be579c5ce0b9643a246beb89194d475bd757b1b1ba529f06fdbb09976877835c2a5f1e0eef69e7cc24ec62db53deef864eaa367cedb94172aaa93403382aed2"
        }
      ],
      "purl": "pkg:npm/stream-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "subarg",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "448ac87516345f5c688ed84d715b604fdb23a4e19a80450aa597600548b4e783843c5a36f36ca0fb313eb75463dfe46a2aadb14ad2fbb941e163e0236c2e015e"
        }
      ],
      "purl": "pkg:npm/subarg@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/subarg/-/subarg-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/subarg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/subarg/-/subarg-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1737147b61d42e43ba3713a7003091268b37f65930dd4cbe8bc86955f1c3ac12b47dd6d32e47a8e8bbde018e9d109c284b1c01df3e8cc9048e243459eb0f64bc"
        }
      ],
      "purl": "pkg:npm/minimist@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.8 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "syntax-error",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e47ae0bd809c83224fe85af44fbce81f52931018c8e5c4d6d0c2d7fa7456162386c1615b8ed415dba33d5d267d591a89673c26f3a3bb98107bc8f35d6f9a5ff"
        }
      ],
      "purl": "pkg:npm/syntax-error@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/syntax-error/-/syntax-error-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/syntax-error@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/syntax-error/-/syntax-error-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.0 used instead of 1.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timers-browserify",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dde5260ce1c9f378ddbafaff162d41497eaa64e909ed430925f75f70732846cbc9bc956aff7b1e7095b0629bee5b4ef2873c72ca20c48361518c5915955bdba3"
        }
      ],
      "purl": "pkg:npm/timers-browserify@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-browserify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-1.4.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.2 used instead of 1.4.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77221eb6df1d806219fd35ca533798131b7b580ea5743cf2b3dbd30d4fdc080f4bd7b62999ef8acd2f8d8d00a3a67f71b2f8bfb216cc0bec8ffc1705301cf434"
        }
      ],
      "purl": "pkg:npm/process@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.10.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.11.10 used instead of 0.10.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tty-browserify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2556b98a3a3e8ffb0ea071a3c34b31c3bdf86f52e10644376ef50635dc675570c25fcd58c7b4c5827672831ac82169f6de16df4da3182f04660311720ee16623"
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tty-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.1 used instead of 0.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url",
      "version": "0.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8734945b6ab4e84a8bd6028cfdafa86d81cb20ee9cb768703eebe2a934ce71f15573ad546df276437dbeb862ff1c23f12aaadd181e5053021eed4aa50e0c2c39"
        }
      ],
      "purl": "pkg:npm/url@0.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url/-/url-0.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url/-/url-0.10.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4687d682dffb7cbe703f563b7f113bfc49932f34159c1d3273289b27438e1c8949a93373825605c55c044ce708a09a899a90d727dc48983bfe16adf817f7780f"
        }
      ],
      "purl": "pkg:npm/punycode@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.1 used instead of 1.3.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystring",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ffc58f36b1c71adad6aeeb68bd983c94f4af88f9d8d3314b2fc1fef19d45f918bbd5ce02726ce25fe18ea8f59c77a092bf2d25e0e6d4d9063c33a953da3ceda"
        }
      ],
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "The querystring API is considered Legacy. new code should use the URLSearchParams API instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vm-browserify",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37264d4775836a1f8d3e48e1fd89a1b964ac4f86b4985d012588149afac9ef4cf18d35e1e58d80b286f1961d0d7ecd0f085079155a5125fb7b368cc05853302d"
        }
      ],
      "purl": "pkg:npm/vm-browserify@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vm-browserify@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "di",
      "version": "2.0.0-pre-9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99e62de8231a8d55781a4e64680d3b5419b111e5231323b0d6dfc80aa249af8aeb05b847d8e6035d84a61a096109a3acce657402efe8ce776337e3bf70882313"
        }
      ],
      "purl": "pkg:npm/di@2.0.0-pre-9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/di/-/di-2.0.0-pre-9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/di@2.0.0-pre-9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/di/-/di-2.0.0-pre-9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-shim",
      "version": "0.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "079efb327ca07fafeea09a504aeac752a7fd3953497fbeb197eb7557582caec31546ab05fb1a47bf3949df1858d62dc1d311c901ba4be7221ff1af57501054a3"
        }
      ],
      "purl": "pkg:npm/es6-shim@0.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-shim/-/es6-shim-0.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-shim@0.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-shim/-/es6-shim-0.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "traceur",
      "version": "0.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e5ca7c6d6eac51d951e47f534b611413916d7bd0444410d9fa8d8fa47c62b1ac93d42790fac0422e3d3ae4a456ea49570ef76e0c7b0a64f807d95562170b709"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/traceur@0.0.33?vcs_url=git%2Bssh%3A//git%40github.com/vojtajina/traceur-compiler.git%23d90b1e34c799bf61cd1aafdc33db0a554fa9e617",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "git+ssh://git@github.com/vojtajina/traceur-compiler.git#d90b1e34c799bf61cd1aafdc33db0a554fa9e617"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/traceur@0.0.33?vcs_url=git+ssh://git@github.com/vojtajina/traceur-compiler.git#d90b1e34c799bf61cd1aafdc33db0a554fa9e617",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "git+ssh://git@github.com/vojtajina/traceur-compiler.git#d90b1e34c799bf61cd1aafdc33db0a554fa9e617"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/di/node_modules/.bin/traceur"
        },
        {
          "name": "cdx:npm:bin",
          "value": "traceur"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6a2bf5ac7367e74428a2cd5d499476af5ab486017408ec0bac2b8db717ccc92f0206abc966b4ee4698ef0f54caed0d424cc135ce141cd237a382443f0210c5b"
        }
      ],
      "purl": "pkg:npm/commander@2.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.7.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "15.0.0 used instead of 2.7.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-readlink",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2d2eeeb42e0c45e97a5d6caf0e5b7140f887d33419f5647187285e0a41b11e4a46a3630e4f95825c2a5ba7b607a00cf4e0f149078e97add53f36be4e9343af3"
        }
      ],
      "purl": "pkg:npm/graceful-readlink@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-readlink@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-readlink/-/graceful-readlink-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q-io",
      "version": "1.10.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1a0a498fbe477f8805ece4c9d9dd404914a43940d73724ab2bca88568f4d08463122d87356c1a1e2ed8b28f38add3e345ea08a045f7f3cb2cfdef5754a24398"
        }
      ],
      "purl": "pkg:npm/q-io@1.10.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q-io/-/q-io-1.10.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q-io@1.10.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q-io/-/q-io-1.10.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "collections",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cc186e463d75278c445a673ac121f268de2637724d8285294bef789193452b4f7f448b41da2b18562f835dac58c5ef648223f40619add4e429cdd0181b4a09f"
        }
      ],
      "purl": "pkg:npm/collections@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/collections/-/collections-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/collections@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/collections/-/collections-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "weak-map",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55bd774db81dbd4126cc10399a9b0caad3ea7191893c4da08fe6fcc33c6c7af0bb5a498bddced8660f47d29575268f02d526b5ca49370d4d3c8454462cd5af2d"
        }
      ],
      "purl": "pkg:npm/weak-map@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/weak-map/-/weak-map-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/weak-map@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/weak-map/-/weak-map-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62c6b617f9ea4cd1878619bd315f2eadee3e1dcf98f005a2a94747c6c3bbc6ef3373dd8d0fd7f792900b1e368fd36e85b75ed47f1accb7de5ce743cb51eca707"
        }
      ],
      "purl": "pkg:npm/mime@1.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimeparse",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e2b80b09258e1cd2817dee81ca89cf67bdadb2d50176ca16091b72d72f2b3ffdff12350f3d785b86676f73eb6676f42018e1e9dd252eb3162294b5444512ba2"
        }
      ],
      "purl": "pkg:npm/mimeparse@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimeparse/-/mimeparse-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimeparse@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimeparse/-/mimeparse-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "0.9.7",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a3b742e1c560a55c1b5cd510adf07d1686564b01d557dba9d66e9b09cbe1db966a7cd5dd85fe916cbe5ac98490c3aee14733e102b713f41f41f3192ac0464c2"
        }
      ],
      "purl": "pkg:npm/q@0.9.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-0.9.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@0.9.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-0.9.7.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.\n\n(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)"
        },
        {
          "name": "ImportedModules",
          "value": "q"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e8650172c1c90578b12fa68e4e7f2d80c176f5cb011485995174ddcec9964df36eb60643cf897f1d969e5821f795e743e4ac49245e319337a54d2cc0a1194ca"
        }
      ],
      "purl": "pkg:npm/qs@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url2",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "81bfd74f59b69a758e21b4306b957d0ead8ed3b7e465bb6ed4ad160002ae68d497d1cf29b29da3a2f2536dbbcf282a629aeb5da0af635ce7a30c2b6f40ea0a38"
        }
      ],
      "purl": "pkg:npm/url2@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url2/-/url2-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url2@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url2/-/url2-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.0.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3d008fa4dbaf58bc08ce39e78adb77e4d89417dd4a21d9e7cd3bb8727b5467d44fbf2b7478b0fd082babf4cb2943457188ceedaa68a00f97896d3b3621c1490"
        }
      ],
      "purl": "pkg:npm/semver@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 10
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 8
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.12.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b24aee69010db74828a46b9e48dbc3b53da9253c8ad63043afa81525fc2934c741f67a459d60cbb2e635bb419ce8a265efb4ad324d8cd6b0f6c48675b45ac83"
        }
      ],
      "purl": "pkg:npm/express@4.12.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.12.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.12.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.12.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.22.2 used instead of 4.12.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e33d68cce6fcb66da0b29e67050b5f0216818ecdb3d5c95856b6d24a3fd95d80545e446893706c0ca99da803021f5fc9e717c60806eb3edda361a794984e3cb"
        }
      ],
      "purl": "pkg:npm/accepts@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.2.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.8 used instead of 1.2.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e81ac5e76d1a0cf41659259c418b61c62b69d1758b9c1d51fc4a63b53780f2af345f170390e7f41bb6daee3ea6974c65a5bd9520f47436672c0113d96f709f9d"
        }
      ],
      "purl": "pkg:npm/mime-types@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.0.10.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.35 used instead of 2.0.10"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.14 used instead of 2.0.10"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b72731d47c707bc5ddc3f064858b56ddaba1ed43ab52e79f7fb6a372c395d4a4bc6196cf0c1c34d3b47e8610a8b8504b283e6b67eb4cc88c2c8377dbd3353fa"
        }
      ],
      "purl": "pkg:npm/mime-db@1.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.8.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.52.0 used instead of 1.8.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.12.0 used instead of 1.8.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.54.0 used instead of 1.8.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e313293299e0754d4ad445ca41987b7e6d61350475be91dc64125bf6d87e71dd44451b62374b5dbb1259ac72641c756bf4a57e04df96114545a502e404adc9f0"
        }
      ],
      "purl": "pkg:npm/negotiator@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.5.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.6.3 used instead of 0.5.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d6cc6f06b2c3074cf48b06839e2b932f3cf25e594e59557f289af242d7a0541ff9d45fa27f8ccfe1826fe6acf5b34d7555dc1dcea018457475f218b5384e053"
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.4 used instead of 0.5.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "604d876dbc3f8dcbf125455a3c0c676e2af3493e185a209d27df2db3ab3ecd2d027a5a53669f52e9f21cca911ce1ca7f75db4d871fac48fcc0149bad4fa1f800"
        }
      ],
      "purl": "pkg:npm/content-type@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.5 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa61e659b85ebcbc248817fb41c6d95c7af4bf865043f3a01e4ddfb101ebb0c3221b3baf02653f60c511f997eb3bf04b00621615fc7667b3b2b28d2d651ff088"
        }
      ],
      "purl": "pkg:npm/cookie@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.7.2 used instead of 0.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4000f395a1dcf22715f08eef6da257270a1df47598a7cb82a9fd716b839f36ed53ec9571408ad480e5ad1dd343b4f8b2c2615b892d76563a2d2172eb28cde8ad"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.7 used instead of 1.0.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2966aedd5426c4edd8c100a327330f3eeb0eb48d21c77506b2a9d8ed14be40742351e6b0a4e56d26f01d793ac8d896b90d347c287df168437c73e0036d72567a"
        }
      ],
      "purl": "pkg:npm/debug@2.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.1.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.6.9 used instead of 2.1.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "626b8c3247ce673cc07ed947c2243115ea49c7fe6b0da622f68f506a7c810a4e3ce41440c8cfef07d5e862566f825c44fe998058e89082b768135d306ad88af7"
        }
      ],
      "purl": "pkg:npm/ms@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.7.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.0 used instead of 0.7.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.3 used instead of 0.7.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "472f73d846be5ad45cf83f25cf1fa286327d15364fe1acd3ed33d1b195e2fb051fbd673cbca6581120057fa526a8ed522bf7a2295d849ff4e0591a2730d17cd8"
        }
      ],
      "purl": "pkg:npm/depd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfa9009e893c7ea553adaed8bbbedd645d98e844c99711f9f30377f30372b8d40b9bcc5774a9df36b95299f5ec4de3d63f4deb45550a1ee6ed5306a7c148bbfa"
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63e6e11c80a78ea65e6382359070f0bd64cdd1572b237b9c58d6eda1f7742cb6ab44a10af039002f4b81765dc70a67f51cc8f2ae6802fe4aa3fb35c6e6661eec"
        }
      ],
      "purl": "pkg:npm/etag@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.5.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.8.1 used instead of 1.5.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crc",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f6d5369943289cfbe8a5052b561e7b55a52d924d63b7eedcc4d30d0fe62018d67b5a3d5b6567713a15cc25b7265ae8c62b11b28cc631305e1ddf047956f10ab"
        }
      ],
      "purl": "pkg:npm/crc@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crc/-/crc-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crc/-/crc-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "0.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e0d8584ad2c40079bdc47187a3d8e3e17333c8aa63060c78bc0be462dd43e0b253099e6bf0564c3a8455b7c540ede1a428c03c1977e0571814c70f3316603cb"
        }
      ],
      "purl": "pkg:npm/finalhandler@0.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@0.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.3.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.2 used instead of 0.3.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06a633b8823741ac4dcce13b65b15fd73d7513abf2a35a64459d22189ded1e3f886f32cb7975cd18c1b26ae9367fd55a88610500abe570878c765bc3dfa3872d"
        }
      ],
      "purl": "pkg:npm/on-finished@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.1 used instead of 2.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f85ff0da1d5287c83cb5470bb39b550f8d34480526ab8f50416794791cb3852e7e7cca1c39d74aa8175ce4f788e3930de65d271db2632d602351d63b0026510"
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.1 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a704680815136ee781ad6e45f2ebe40a3d85bf6f98e8014468ac0f042de25cff904136987a1a8d4d9876bd76dd3c821167846b8b7a7ad498d3bc65ad42c0451"
        }
      ],
      "purl": "pkg:npm/fresh@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.2.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.2 used instead of 0.2.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60989999365392baaf81e7ccb16762a132ac65d1e77c08471e411d3e0fb83c2a8c244187428e622508c46ccbf75f2059eb2dd9d918f59aaab558d2aaf5ed3237"
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e8924e864e0c253675064d287a0234511f09d0903442f2d8f7f7ecdfcdf6530d051120e6a8f6a8823bba39afb7e6a20dc8d4c0fa76825fef536692764da3174"
        }
      ],
      "purl": "pkg:npm/methods@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1a19c25a218be2e9c7d87b84a083c6942462957d804885643616d634d1cf978ed085b3a82c906ab59dca1ece60a384ea09ffe440c4643fa2a379fb7ffda749a"
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.3 used instead of 1.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1de2f48e5be0c233a039691202235096682ee7b9f9f356965fba1e53d155ec871c73156b9a15cbea2a8bc014b34645e39cfae651a6da5ca4f9a7ec20efccbb8"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.13 used instead of 0.1.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68d3287720fb0fbe374a05e17ed27a7c809805e5920e92e3d2999f87ed07dfc4231565820068df52217926d2436a9a53b06a533b418d9883b94dc4bdff545b52"
        }
      ],
      "purl": "pkg:npm/proxy-addr@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-1.0.7.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.7 used instead of 1.0.7"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "875eda6c4fbd974dc6b45ec7f9375ffdec486c59ce8223a2798aed05f95e5ee0d35378c69dcaefe282ce22e5e714fbde0ee40f77d91ddcc1a484a68c1a843038"
        }
      ],
      "purl": "pkg:npm/forwarded@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.0 used instead of 0.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "0.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "769d02d58609b9932514233d79a87519b095191c1cbcbb821c359fa948484ba5aa2ceea314adc6247450ac3f8e4c80ff992de0ae5de0a8627be90b0e4e936c47"
        }
      ],
      "purl": "pkg:npm/ipaddr.js@0.1.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-0.1.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@0.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-0.1.9.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.9.1 used instead of 0.1.9"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05ee05a451868b512c16a3f1e811230f34c8595b4f96c2300ead1fab9d983c539c4a5117f4d935c9d81f2158eb4f165b783e8dfde7646043d83704c3730467fa"
        }
      ],
      "purl": "pkg:npm/qs@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-2.4.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.15.3 used instead of 2.4.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c5278ffb479eb33d3881b637ba7f4672ce1d22a695a201e4b3a4e1518ea55e5d56add79995264a67e0ea3beabeb824f189547e919922dbc42bce87bcac8a3cc"
        }
      ],
      "purl": "pkg:npm/range-parser@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.1 used instead of 1.0.2"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "send",
      "version": "0.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "100341cf4219a68cb0cda2719688c6431efc99105ff5c440bf9f2b1184bc1bd992dcf0e6ecd38cc823b5cff520896de089246575096fd11b6f3964a627a96c81"
        }
      ],
      "purl": "pkg:npm/send@0.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.12.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.19.2 used instead of 0.12.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "281fc054b291c193ce128ebf97190327e06fde315146b8669d130fbe95b09887d4820a731a4401aa8972a3c1517fcdf76ff179af39b2d6e54dddf1c19234f183"
        }
      ],
      "purl": "pkg:npm/destroy@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 1.0.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b006985eccc40f900b06debae45d303100945e91ae66c19da29a2a7073dd2f7f5961d8bbb87a19961adf65f86ff16ce2be1073affa17c1a8feca22b9c18f0c5d"
        }
      ],
      "purl": "pkg:npm/mime@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/express/node_modules/send/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.6.0 used instead of 1.3.4"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/q-io/node_modules/.bin/mime"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d964243328d808b7e7372868563955187b02c5160f1f34b2a30d305bf4b13b4cffe010b5a3e512d26a4c71346730ec5acfd45173fa82651345ac1d15c91e445"
        }
      ],
      "purl": "pkg:npm/serve-static@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.9.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.16.3 used instead of 1.9.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f053d48b404b72a3ed2ea0a5ddd6790baa281458b07e42e35047839c981ef7796aa4b0ce68beea9cc9c92cdb1d38dd6f1755bef9ac6d4743487ddd331793341"
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64d837424ff4b0863135f9b8395f1da69bcedda9762ca7b77d7b8d6d593f1f36cee5a9327fe7a0659a5f069acba079df9bc9254e295ee56bed78b5c15fb708ac"
        }
      ],
      "purl": "pkg:npm/type-is@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.6.18 used instead of 1.6.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76afaa7a543d6a41e970e97f8145514f15483a4009d70477400bdbe11b158d2f285681630c64dcebbf702589949a49d41791f030b3a06f93be6b72b17d66a93d"
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f253760fdc88941e3a68cb7642f3747e73158f25657673a70abcd97ac6f74c36f7633f9d3b4ae466ef89e221a1dfbeca8093927d8fdc5af5e8d64b1b07348ae"
        }
      ],
      "purl": "pkg:npm/vary@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.0.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c638cd1b2fabcb5961b4829caf63d3ea89376acce141f82b503a783992c769c811805985e9747d5c238955c5e55464289c8a9770ad43bea80a29038f5981927f"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.6 used instead of 0.5.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/browserstacktunnel-wrapper/node_modules/unzip/node_modules/fstream/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/vinyl-fs/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma/node_modules/http-proxy/node_modules/utile/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/promises-aplus-tests/node_modules/mocha/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.1 used instead of 0.5.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed"
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.8 used instead of 0.0.8"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0059392b9eeafbb9520426f057800746a6d971dd2abe2a03f05351ce8c442eccefa4e774ae407eb58fdde77f4c6bbd7afaba66c130c9fe821241acf7a4c3f76"
        }
      ],
      "purl": "pkg:npm/rimraf@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/angular-benchpress/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.7.1 used instead of 2.3.2"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Rimraf versions prior to v4 are no longer supported"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/browserstacktunnel-wrapper/node_modules/unzip/node_modules/fstream/node_modules/.bin/rimraf"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "2.3.25",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4006ac58cfe2fe800284e19257b2973a256affe39dfe9050ab2c91336ee1ba0352c1fe59b2bdb0e1e989ec61a9ac151c6a8b76e26e5a7cb36f149bd6b1b22910"
        }
      ],
      "purl": "pkg:npm/rx@2.3.25",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-2.3.25.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@2.3.25",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-2.3.25.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e56b154c5707d6eb7f9248406877f83d5808f1cefef86895729086c4fa2e23a6558eca8f9d20dff21ffc1ed56a734b787f3457c2730aef411c65e02cdcf21d76"
        }
      ],
      "purl": "pkg:npm/underscore@1.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.13.8 used instead of 1.8.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "benchmark",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9294e8b421ff2c23e89cbb797f5b9adde11d1eb49cfda2b2cf5a90ddb7594f8041731076189e47ccba8b63f8bc794b232499f6b094fa16f519a8126d7dce21c"
        }
      ],
      "purl": "pkg:npm/benchmark@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/benchmark/-/benchmark-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/benchmark@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/benchmark/-/benchmark-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower",
      "version": "1.3.12",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62a19b6e1c2b4076c723df8cf2d5476eae6dc088557c969044cdd33a682dcf90e1f6c3f0623893f28a3c30886fd0c6be738c55b00041f81de8a0c242f2175c6f"
        }
      ],
      "purl": "pkg:npm/bower@1.3.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower/-/bower-1.3.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower@1.3.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower/-/bower-1.3.12.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/bower"
        },
        {
          "name": "cdx:npm:bin",
          "value": "bower"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This Bower version has SECURITY BUG THAT ALLOWS TO WRITE TO ARBITRARY FILE ON YOUR COMPUTER when you install malicious package. Please upgrade Bower to at least version 1.8.8 if you don't want to get hacked. More info: https://snyk.io/blog/severe-security-vulnerability-in-bowers-zip-archive-extraction/"
        },
        {
          "name": "ImportedModules",
          "value": "bower"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/grunt/plugins.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a0f822d87f85bf68bfda37a8c5eca27b53c34b2b40e57b0c7dded44b8c1d86e8c3e5ab058960dfa9ca92884abd2c6f321f489542927ead62580a04ce35458a4"
        }
      ],
      "purl": "pkg:npm/abbrev@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.9 used instead of 1.0.5"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.1 used instead of 1.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archy",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2632c7ad8d7bf8a423d3acc6cf3ced9cc72f6fcc99f68f06ddfae83e99ff1f114646d84efc568e5eac9323ae71ae2d32aa38bb52e6e9451c949f835c9a0a3c4"
        }
      ],
      "purl": "pkg:npm/archy@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archy/-/archy-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archy/-/archy-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower-config",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b1e6d7043a8b97913eee783b616143086fdd37c7f360851e156878326d4ff6fea549a7ccb879966754fce4374a1aac94e640d3c8d79c5ef53f03084dc53fed1"
        }
      ],
      "purl": "pkg:npm/bower-config@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower-config/-/bower-config-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower-config@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower-config/-/bower-config-0.5.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.3 used instead of 0.5.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c8ff353516bfe0b731baab55bf45f9a1fa96f4f010725dc767e807196b56ae61eb313c05fbb8a6fe02000a9b0dc66bc3ff4093996c457958f40a3cfc5d13bb"
        }
      ],
      "purl": "pkg:npm/graceful-fs@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mout",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9993000470103d0f3b24342ec59227752e975c36197de01f713bc76321051b848452218d9089cd662fd685eb108c22945a28756c30e4a87c3adf0c8269cce1b3"
        }
      ],
      "purl": "pkg:npm/mout@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mout/-/mout-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mout@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mout/-/mout-0.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b273783b84e48a0ba36698562cdd04fff9d09a6efbf74458684e770dd2fb658c1e7b60fc0c3a3dfc4c9888a51f377ae77965238499ee7a28dadc6f48da2d21de"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "osenv",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5419356df75a3b8821dce58ef0b06e0d8d9a969d1bb8bf18cd0eadd77c7273c3d03eb9d483902042f20d431dd4912e1da26f141822f9f7bab8636f8ce133ef9b"
        }
      ],
      "purl": "pkg:npm/osenv@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/osenv/-/osenv-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/osenv@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/osenv/-/osenv-0.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower-endpoint-parser",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61664785690f757b487c7dd546edd0215f79b1aef93bdbeb41604e1e37b15822c1093cb9a89bd1af7e8b5d3a85c13721497565cf2e6989824e8f31ebeea86c36"
        }
      ],
      "purl": "pkg:npm/bower-endpoint-parser@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower-endpoint-parser/-/bower-endpoint-parser-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower-endpoint-parser@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower-endpoint-parser/-/bower-endpoint-parser-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bower-json",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a2093be5d8e9dd02bbd98d662f68eb90588fdf8de681cfcc0f2c5f0c59a7474fe50b6810eab5020e62a405b31b73505c3a136d3af7ad269597e252e4753cf06"
        }
      ],
      "purl": "pkg:npm/bower-json@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower-json/-/bower-json-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower-json@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower-json/-/bower-json-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7637ee2284eed8832749394238ec8e86757a4e349fa351999879336289f00b68476e8828dad6629cab7b6e4a9d11840f6631fc5d30ddd8b24a7007ba6e300b7"
        }
      ],
      "purl": "pkg:npm/deep-extend@0.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "intersect",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "069fe6486f5db2afde38c93643b0f28cac58eb64d353646f36fc9c8d71e18b94e3ac0ef61fe237739fb59c0380aad10d72b42f09be4d0e5b283d6278061d3548"
        }
      ],
      "purl": "pkg:npm/intersect@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/intersect/-/intersect-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/intersect@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/intersect/-/intersect-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower-logger",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db1e27dc6b2657ac3705e30adf31efe93f3c1dbb8c407d8c27429935b40c6c9abc5cf011747d69f7f097b1d90e056e6c31c9c108e546c6eb432586e487603b41"
        }
      ],
      "purl": "pkg:npm/bower-logger@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower-logger/-/bower-logger-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower-logger@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower-logger/-/bower-logger-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bower-registry-client",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42dc1c80cb03316bc2b40d72ace99a85a9c014cb792168c5efd7ab762dfaeabd17fc0671630b0bc87880b1bd68f56572e2465bd92a7b9296518b23755f4ac388"
        }
      ],
      "purl": "pkg:npm/bower-registry-client@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bower-registry-client/-/bower-registry-client-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bower-registry-client@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bower-registry-client/-/bower-registry-client-0.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "123b66b57154bbec179ba3d6dd3e914f57a4414c686c2ec1e530c2534092d36d76c33a702a25eceaf2ee9fe248f8ea169a696259d62a9eba63ae52bb5b710b75"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0e0aad037bf87d671b1eab3087f0ac3f16295fe6917fbcc23af811fb2eed235f3da9a980a34c0411a254b14488be031fa80828e5c6824c3f4610e1796b40d1e"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.51.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea97d28632df9fa4e13a53c7c90a3b9c1c44c136b63f3bea1ebbb1412e754eb0038d68f7a9eb5167601ee60473305ecdd9f286e56c3bb2ef99ea3037b05bf41b"
        }
      ],
      "purl": "pkg:npm/request@2.51.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.51.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.51.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.51.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2a517d033398fb68f58f0a7a5679b8b23488f6c22348f3b6719ce3281afd1a1384c6941cb637ee6259ce9d43f34e2996810f65ba3d5cfc8ed386916cd20b910"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.5.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "0.9.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e22b17d2c89d580d7265622650431006cc471ec2396ec806ed06c1a5c59c9113922664f12c2756f70257006b043cb3be915f49f1201aa1e715a9c04fc9128fad"
        }
      ],
      "purl": "pkg:npm/bl@0.9.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bl/-/bl-0.9.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@0.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bl/-/bl-0.9.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.9.5 used instead of 0.9.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46d3809eda340fa208542f9d53ebc7c87d2d5ece817d9fecd2469a4f9fba9688b0a22f4edfe2798804819258901eb77c19244d184452edff2981a45cf3de5b02"
        }
      ],
      "purl": "pkg:npm/caseless@0.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caseless/-/caseless-0.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9f7b19662e9f4ccab91a8d05728c40dbd158fe2a146047faf12e25616a28654fe6645f49517aab47e80724e340af3031114786f9785a770ab7ac92906cd4f8a"
        }
      ],
      "purl": "pkg:npm/combined-stream@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfeeee05dd69a9ee58b603da70821b67c1ee1de2c554d7b89941321435cbe8a8aacc4ca48dbc3ee665d95e918580d55ab1d2f88d62a068a217ac41e2ca73752c"
        }
      ],
      "purl": "pkg:npm/delayed-stream@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c31b911fd03a1bfc9b19531525b493a19bf63d9a5b5e004fb8eb2dccf51073fd177741510d27be5a19184de7ac9e91351ba1a04891df0a5565f636317afbdd4"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.5.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.6.1 used instead of 0.5.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e48a7686e896b3561623d802a2ebb34e20086a5dc04e4000ab693d16761596e193b7913892d17ec2d672758c565feb06a4e1b547200fe83b35a48764e1022a6"
        }
      ],
      "purl": "pkg:npm/form-data@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d0277322a660870080413057eeda36927ad9de3ab5db4b2caa794dcda1df3aee834ea52fa2f45126b393d68233314a00726d17f621554bb6bd587eb0cefa892"
        }
      ],
      "purl": "pkg:npm/async@0.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.9.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.9.2 used instead of 0.9.0"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.0 used instead of 0.9.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a6f2c540d9b089230f1fbae55c2af9a63671855065bcb294e456d8f67d74c465591f378d9bc05645b437a6e7b7858be352c6eac907c110ec9777b821cb9fc57"
        }
      ],
      "purl": "pkg:npm/hawk@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.1 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3af7cdf32d68031c69873925d929c24beced57fb95293013b602e359883fecac1c3727f7af3a47c4d4096422adb19778f8cb5e29cce159b4a3b445f86c6814f6"
        }
      ],
      "purl": "pkg:npm/boom@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-0.4.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.10.1 used instead of 0.4.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "0.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "659e9e1b2cc68f23139a948f6151025f2f6e35fa8147bc7909abe151a2ce783e96d2f58ad66a7f6fb3b77fce9713432d7e8f6b67a061ddf9eec3d5ebf0c17dcc"
        }
      ],
      "purl": "pkg:npm/hoek@0.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-0.9.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.16.3 used instead of 0.9.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82f5926e0a8ffb9ebd0ddb2552209e97122fdc860ae4b826ab552b46793eb355b140e435ea3dc63c372376d80be40bbae4353fc508baab7c4fb5fe4ab5afb721"
        }
      ],
      "purl": "pkg:npm/cryptiles@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.2.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.5 used instead of 0.2.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "0.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c32eb29aff2c33eb980297e2e63a2221b5e3f56e112c000ce17cc79d3e88873f777262701ebe5689b2176a6fd62ed2c4627f23ff7d1a92b7cb7ee6a1885a519"
        }
      ],
      "purl": "pkg:npm/sntp@0.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-0.2.4.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.9 used instead of 0.2.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7282bcb91e6bab620c8fe1de9feb0a3c0e657606c2735feca4f74a08bd45c3a87e0f4b3fd8bccc7112b40aab9fb35874af2c7f9e2c011c616ef070b787053e94"
        }
      ],
      "purl": "pkg:npm/http-signature@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-0.10.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.11.0 used instead of 0.10.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "161f738771b6999f2a33f930b222b02f65361665f156c6e83f8c759978e784a1efdd29b368166862fc44409cff612da09c281df319405567199d0c82f6a641b0"
        }
      ],
      "purl": "pkg:npm/asn1@0.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.1.11.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6eb536e20eebca1470182236cbed5d1909905e2645ed3b488f9f374bdeb2d238dd6a321eeb09fc06e5f210b621bc3db676d2310d0545934e184c9c3077039827"
        }
      ],
      "purl": "pkg:npm/assert-plus@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ctype",
      "version": "0.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fa084928495e2ae74cd6dd39531cc6f3cb5139fb396735c63ec9beed5956254f03e1c7d2e99df024778c1e7295a49c3ca9b69e24f7b2d465e22795fea377306"
        }
      ],
      "purl": "pkg:npm/ctype@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ctype@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ctype/-/ctype-0.5.3.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30d50f7577c34b5a6024d72f279c33299665af934310fdf8e28e6cdd3c122808d1c4a02af77405ae21266790436d839d4e5c91b329453d9f2bd9b89b44c07f9d"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.0.1 used instead of 5.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79c85fbad8ffb794a84cbe16669aa30350c2b9dd573b4590177fc6278f1806673864c8422bbed003a67fc3a55340444b2ae27876bcdede4c364d44fcc595d537"
        }
      ],
      "purl": "pkg:npm/mime-types@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.14 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-uuid",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f36b3e400d3a3f39879db39e722b2eacd2b236e9a4898cc6519a4e1acb8b24e790655c7680966d1126ffd45ecf0a853648e51f7eb80c2c87687cc322bc562536"
        }
      ],
      "purl": "pkg:npm/node-uuid@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-uuid@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/bower-registry-client/node_modules/request/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uuid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.8 used instead of 1.4.3"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Use uuid module instead"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/request/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/dgeni/node_modules/winston/node_modules/request/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/dgeni-packages/node_modules/winston/node_modules/request/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-jscs/node_modules/jscs/node_modules/vow-fs/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma-sauce-launcher/node_modules/wd/node_modules/request/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/protractor/node_modules/request/node_modules/.bin/uuid"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d7799ab912b89448674d21e3cee399617a67ee0812a2e43011744df4bf5ef730f08bca6ab60f1478efb27f46e0972e984dc7b39502a5d5ca3dc9a146a21e937"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f93341d0a995a4cd4f0610b4d8f0bc8cac692bddb3e32a816d4e4c1412a2506dc9636de2bc33b9a588ff486b6c68388ea831eae9f903d2ee8609b691a659efc"
        }
      ],
      "purl": "pkg:npm/qs@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringstream",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0a9d3ab1b3bdbcce8c77de766ea02eb1901a12d6f7c192de1ab7cbadf6192963b06a7c9f64ce285df6c2f059337ce9a6512b6a976d49b5f5bfe1317eeaead28"
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringstream@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.6 used instead of 0.0.4"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "0.12.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa07783e494d26cc73bb536836384645f399679965343e95b50646b9a0d7766234222efd579f9809adac2f1f10ea562160ddbef5fac2cd4c0e2d0a6ec07bcee1"
        }
      ],
      "purl": "pkg:npm/tough-cookie@0.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-0.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@0.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-0.12.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.0.2 used instead of 0.12.1"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "ReDoS vulnerability parsing Set-Cookie https://nodesecurity.io/advisories/130"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04ba8ca87fda37ced9ab77dff1f3d07c6f5a91ababb797b3b6a0147d5561986a209e609cd95eec247669260e5e917f7a1e00c291702ae0182be52c9c9634bf20"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.3 used instead of 0.4.0"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request-replay",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed2fd669658f9042032d6712c10a19719016ad7e80e5da44ffab4518485aa745029bbec4e238dc05499595b28a2e7133bfec25b01bd28e0d7545c71e629fba5b"
        }
      ],
      "purl": "pkg:npm/request-replay@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request-replay/-/request-replay-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request-replay@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request-replay/-/request-replay-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "retry",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4609dca312c5d46ab00334d9b3f2b66296645ab74861b5ec99eb1da268be88f8a54b38d4cabff0ccd22eb5ea1355a5a893377064827d34744d41afd1522381da"
        }
      ],
      "purl": "pkg:npm/retry@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/retry/-/retry-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/retry/-/retry-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47928c2879cf01069932a2ceb32bb25267088d27839beef77a8a90a5a5c0ec0676d812fee82fb599c52c7203ac35df1656526ebe58003ec7a0731ee98e55740e"
        }
      ],
      "purl": "pkg:npm/rimraf@2.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.2.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Rimraf versions prior to v4 are no longer supported"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-clean/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma-sauce-launcher/node_modules/sauce-connect-launcher/node_modules/.bin/rimraf"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cardinal",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfd004a08d02de1ac7f3ece1d6a727b352a201a0d6985f2c899317092eab1db4cbdf2f91f683f7e0a1129d29d92fee3f2f5c1500a3e50910fe905e1a47860dfb"
        }
      ],
      "purl": "pkg:npm/cardinal@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cardinal/-/cardinal-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cardinal@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cardinal/-/cardinal-0.4.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/cdl"
        },
        {
          "name": "cdx:npm:bin",
          "value": "cdl"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redeyed",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a67935bec68d2eed540000a52ac2262b3f478c1be0f62f1c6d1a9347325b8828c61747d948caa975c0395b78ee3b77387ad16f4eb69b10292af708c2e39672c4"
        }
      ],
      "purl": "pkg:npm/redeyed@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redeyed/-/redeyed-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redeyed@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redeyed/-/redeyed-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9e5d30a37ccc4b3d75f8bd8345f50a52e657ffd647293f475e66a6914d202205446e4ff7654fed9d38a7ca64fbe800068f56dad63e907caee8fd661078264c"
        }
      ],
      "purl": "pkg:npm/esprima@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/cardinal/node_modules/redeyed/node_modules/.bin/esparse, /app/node_modules/bower/node_modules/cardinal/node_modules/redeyed/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt/node_modules/js-yaml/node_modules/.bin/esparse, /app/node_modules/grunt/node_modules/js-yaml/node_modules/.bin/esvalidate"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad309c6c5d30af00be90acc0ff74a905ce8fadc3b1ffe3d1415b52dcf103c39b46ceac9ca41e3c7514bc072c450ddf088f913546d69f677e11d57f552c8fef51"
        }
      ],
      "purl": "pkg:npm/chalk@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f63ca52437942782249e9a8c1ae8cae4f4c3c276d1623929a26e367e8f5aa12c61c762ca99c2604c445dc844c557a3cb326c3ab1d9f265d9dffc3a9841a1690"
        }
      ],
      "purl": "pkg:npm/ansi-styles@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3289ace0b5fcd58cfc6dfc78091fabd8b42875a015d124941ca69c062f5bca5af2dfffa2a505fdb8e6a1ebfcc65d17c1479e77c527f5c2e3ac904db6fe002bcb"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.5 used instead of 1.0.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d58b138357e4dbfe894e8421b59900acc92eaeaf14a1653541ed1a4775541e38228f89ceca54962d602d057a19e3f7573a6ba07cb1a6d5cf9086e0f427279d14"
        }
      ],
      "purl": "pkg:npm/has-ansi@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "has-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-compress/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-copy/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-foreach/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/has-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b06c0818c8e161d5b6ebf221c0ada0916588f0344254eeae8f78588074fecc3f902f5a5adfbb4cdee8e1c9f70921849bb31a7b1b1872ef3ad15bfd401e6e0198"
        }
      ],
      "purl": "pkg:npm/ansi-regex@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0deae164bee3ea2ebf9c49d51b4a9588a5c8d0e2a8bafbe9b0089a8fb73e2dfa99659c5dc19b6ff3e52203fc385542694fc5335f4a51d5d7073a28b519b9abb9"
        }
      ],
      "purl": "pkg:npm/strip-ansi@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-compress/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-copy/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-foreach/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/strip-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5d099dbc32733b93b7090c973b12af3403d0ac445000399532e359e93990acfbea928df232ee8e51878e82064f8393915b289df75f74ea83862b574ecde5168"
        }
      ],
      "purl": "pkg:npm/supports-color@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:bin",
          "value": "supports-color"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-compress/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-copy/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-foreach/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/supports-color"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chmodr",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c01e06e92cd2bf8790fcaafb4150a73cf761975aa18b9069a812fe95d8d5034d10b0da723d22f6c58bcf5c6c4028a06c32a8066c78f8f2b8b896063f87d2dc1"
        }
      ],
      "purl": "pkg:npm/chmodr@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chmodr/-/chmodr-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chmodr@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chmodr/-/chmodr-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-zip",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f37658b8cc3f188a71271f0840c8bbc6f745ca7149ad99260937da7b6e83b0f5c66b178302eb0ffb72ee358733a00e07090756a1a657db0f7a6992597587b005"
        }
      ],
      "purl": "pkg:npm/decompress-zip@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-zip/-/decompress-zip-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-zip@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-zip/-/decompress-zip-0.0.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/decompress-zip"
        },
        {
          "name": "cdx:npm:bin",
          "value": "decompress-zip"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f81f5cb9298c292602bcc24d42b9ee4b2cf826c072984828646eca5083926d56e479ba519c9317d1eb61f7004f540e474c0bccb25e5a988a1bb3dc0aa0d9766"
        }
      ],
      "purl": "pkg:npm/binary@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary/-/binary-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary/-/binary-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffers",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6afeb0c41926ff42cbefdaabf3233765b8be64ec0689393af0db7cfdade42d86b6c5ee2b380ad953d035f23b5a1e8b60c2a78ba88e3cd0ee281a487a7590011"
        }
      ],
      "purl": "pkg:npm/buffers@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffers/-/buffers-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffers@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffers/-/buffers-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chainsaw",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef99167d6b7a30428d0bcc585c8751a437a145863fb4d4a0c0a689abe75b6c3731391b95aeb43e4841e85ac9e2567f573d87cfe2099d58878393fe18369d6b35"
        }
      ],
      "purl": "pkg:npm/chainsaw@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chainsaw/-/chainsaw-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chainsaw@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chainsaw/-/chainsaw-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "traverse",
      "version": "0.3.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89ac2093484b3f74b118a0df9c325ff304f3e29daa2269f28a13391e1fec1af4372b7edd3e2ff0f2c46174d231600d53c05c1ce660e1209abe3b446cbd704a75"
        }
      ],
      "purl": "pkg:npm/traverse@0.3.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/traverse/-/traverse-0.3.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/traverse@0.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/traverse/-/traverse-0.3.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ad401fee00e0b09826d40a8bc3b877e6bcba0ed1259b31ae0d1427eca52c5af427a9314d03c7c9d1918ef55708e17e5d5a9d3280495c7474e9ae6894b337ac1"
        }
      ],
      "purl": "pkg:npm/graceful-fs@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-3.0.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.12 used instead of 3.0.6"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.2.11 used instead of 3.0.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkpath",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6dab874a199ac5542212f96b00f5b148f9fcb2948bf200d5465d75afcbcb4f8aff29d9e49cbaadab041b4e867639af2c264131618d73ebf77e5fba4d8aaa38ca"
        }
      ],
      "purl": "pkg:npm/mkpath@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkpath/-/mkpath-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkpath@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkpath/-/mkpath-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80839303fb89ba13f016aa7eb2963b550d6c6ad6e71a50fe890559c48d7c2ba86cf04beae2c5fcd4c97b041e5bc8ffcbb1b476c8156d9af7449a18bb7af27a03"
        }
      ],
      "purl": "pkg:npm/nopt@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/decompress-zip/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7c32705a09e057f6c2d151db71cffea89e56fbc0bcc5c42ca5925c8ef27dbbcb92712586862cfbb871cc9ce738a1e7c4a913363c4267f0696aa0baa5d4e98f8"
        }
      ],
      "purl": "pkg:npm/q@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.\n\n(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)"
        },
        {
          "name": "ImportedModules",
          "value": "q"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.1 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "touch",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "254caddcb59946a926287d2968ddc8a95aa12d5d7516e5cccf473efce6440fd01bb3eb05c5276d8012e49f0a999a271206db9ef91197e235ef6c22238a90cc08"
        }
      ],
      "purl": "pkg:npm/touch@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/touch/-/touch-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/touch@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/touch/-/touch-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3569a9bcb4aa52b82b002f470aec44bdbf8f4a5a07a6a56ef85a9c3b879e176879a9846103b7afe8abde9724002ad7a051b0ba472a499e510e85df2f96834a62"
        }
      ],
      "purl": "pkg:npm/nopt@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-1.0.10.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/decompress-zip/node_modules/touch/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt/node_modules/.bin/nopt"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fstream",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9f8aa0cf878fb4ebe3feaf171a38215a0459c0e2efc45a808d33be2851dbf1e17b06f47e98b2d8fec9031e6498bc7924dfd3c899613a2c5b1f84812cca56038e"
        }
      ],
      "purl": "pkg:npm/fstream@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fstream/-/fstream-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fstream@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fstream/-/fstream-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.12 used instead of 1.0.4"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fstream-ignore",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "473e6c8c3ce8e14d2ad2210aad0959ab233a3d9402570ab69e74b4e0d718818950ef8e57192a887d933ed8ee2b5ddba67ddd34131a95fdc09e218f47e2962149"
        }
      ],
      "purl": "pkg:npm/fstream-ignore@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fstream-ignore/-/fstream-ignore-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fstream-ignore@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fstream-ignore/-/fstream-ignore-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.5 used instead of 1.0.2"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f41f5b61267395808d33455dc7fd599bf475a60e01934d1ecf793f0b934ae2da43267cade829006895fa89b91a415694f1e50e4f28697d85d40440d4d7248ed"
        }
      ],
      "purl": "pkg:npm/glob@4.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.0.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.3.5 used instead of 4.0.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12387939d93fb855c08f99dffcd49793451a9aa70601f39d1c8ee7634cef087ca7e1fde728b168513a7e958c43c528a1ff8d2e5bc969c03a653961dd5a441758"
        }
      ],
      "purl": "pkg:npm/minimatch@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.10 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7559909973c1953805c3bee19bad2e77ffe5d9b0ae0ca92a0b6a27d4406833bb3d52b9bd2100eb9ee8f067ddcd16702ad1d559d070574d2ecfc041be604efe11"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.5.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.5.2 used instead of 2.5.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.7.3 used instead of 2.5.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5edaf127805fe670e749c076d94d1fb744e90932d216990f02ea27df6dd7f66170628c335aeb016ee9f13ac8b690ee856f6f6b7876713cd1e038bfdf30da8ca1"
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39d7e4680d0cf2a183e4424190cc374e982e49697a973f788ddc95998b397b84e9c1ea59277e58e5795c86c23070decd3ffcb335adcc25877f7514ceecd7ff7e"
        }
      ],
      "purl": "pkg:npm/handlebars@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/handlebars"
        },
        {
          "name": "cdx:npm:bin",
          "value": "handlebars"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f62d65b27717f9f81b696f44bf1a0ff22859988e75fd8ed43899d37d611abbdc184ddb51215340efc37c180cba9ddd3a2819426508a7f719fca38f2fd14dc58"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.3.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/handlebars/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "0.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2bb9ec72f8bdbbe08e2a61b816ddf7a215e065f73d1ff49e3bcea3fb43702095eac35e2804be40c671b816d82ce995236f7630c47a204e3fd94cb1583784f7a3"
        }
      ],
      "purl": "pkg:npm/inquirer@0.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@0.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-0.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-color",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bc06e3b5f1a8c1c5f6cbd9e265764f158180e3b2113c855d4409a7d1d2997913381bc8af589e61962c7ca55d5ad081a2b82754892735838c89dc7d5b89beda6"
        }
      ],
      "purl": "pkg:npm/cli-color@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-color/-/cli-color-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-color@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-color/-/cli-color-0.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1274cf55f6977f397247a169937cd3d301e0fe970e99a8783e8ac3f2045b89b192d213462083571867fd25e83aca41730ea863aed685aea4ca0e7e845f319ad"
        }
      ],
      "purl": "pkg:npm/d@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d/-/d-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d/-/d-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.10.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d798ef7fdfd8073c25b94a15584456eeadef4e413f8a8edec6a0fc9e0589fcc05d9d9c947efd7da5cf114cd4cecbd4e6abf8851915ce3345e1f1b4ce7ddeb768"
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.10.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.10.64 used instead of 0.10.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-iterator",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e933a66c533a38f5a44def9b43766e524bea71652302762329408b75bbd1b00533d8fafe7d82226f03573642cdb482bd3cf15b34c65975d691364c8986518984"
        }
      ],
      "purl": "pkg:npm/es6-iterator@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-iterator@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.3 used instead of 0.1.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c23a1b3b8ccef3bdba1d553b988d8e03f07a42cceac0726e29a6fb80a1d5c7eb917d555819c589902205c55d8c69da9bf7f4544ab849febea13df1bb16c5ada3"
        }
      ],
      "purl": "pkg:npm/es6-symbol@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.4 used instead of 2.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memoizee",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba44ef0cd7ee65a0c4e44c544a611455e559cbc3e6f5421de5954e10fcaf44a26c554d0b1ced25072c63c66a03318ae28a5dea9cd7221d5c03d15fd3389fcf2e"
        }
      ],
      "purl": "pkg:npm/memoizee@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memoizee/-/memoizee-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memoizee@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memoizee/-/memoizee-0.3.8.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.10 used instead of 0.3.8"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-weak-map",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c58fd9a825f07bd2cd875f16137060641c5e48d1f53930f10f6b17917d80d29005050bcf6a28e69250fbf8e521a8f137ef77fa0cd182569bd698a21386110db5"
        }
      ],
      "purl": "pkg:npm/es6-weak-map@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-weak-map@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-0.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.4 used instead of 0.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1470756b4da17afec62f6d48ea4e7431b39df4660e5c037e7dce5f2d60094aed9a89815ff4fe31bc2500d0b0a00a7e1660c46645ebd7ca4083412e59f807e7e"
        }
      ],
      "purl": "pkg:npm/es6-symbol@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.1 used instead of 0.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c2d4afb7bf57af911bb222df2b476632014d9d344dd9f892296bf09bc40539c88bcc89e18c8f6617c0968bd9512a87bbfe18bef09c3a23c64a42ce512e016bcc"
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.5 used instead of 0.3.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-queue",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06975892df44bc697c39f5870d03c8495a5c979c59b616fe5cfb1b10b8f90105f1202f08ae20d92106230493c49b9ad2e36d2c8d9d132c4cd172ae4a741858ad"
        }
      ],
      "purl": "pkg:npm/lru-queue@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-queue/-/lru-queue-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "next-tick",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fb878b2f3ed97e42276806fe2d68a5d48c9ef41b66ac699f06dbc9d2d0e92a69a957f1dc30aed5adcb11033caeb6002d34babffefc4d2953007063910f9f5e5"
        }
      ],
      "purl": "pkg:npm/next-tick@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/next-tick/-/next-tick-0.2.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/next-tick@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/next-tick/-/next-tick-0.2.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.0 used instead of 0.2.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "timers-ext",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "712b05c160d7592413ad8608fd632a393fa8c22030009c136956c2e85c31674e368293848d055c75f1440bbe4face6eb92da754637de732a98f769cdffa618aa"
        }
      ],
      "purl": "pkg:npm/timers-ext@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-ext@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-ext/-/timers-ext-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.8 used instead of 0.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc23bdc311163924aebe39ac466ba076c447238da604d0c38b8dd3ed88b4fadb7d34a63ddd74ae05fc029341b0238c0c4834dd8a9ef875875529013d4f22f5bb"
        }
      ],
      "purl": "pkg:npm/figures@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/figures/-/figures-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figures@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/figures/-/figures-1.3.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.7.0 used instead of 1.3.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "2.4.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9ae90aa303d8c9078018c3e3690f6188e1dcc72fa32fd212fe072ea222e97809ed02d6b79fae364999c1af59d9cb5309782c83edbf38dedd441f187fa7084b1"
        }
      ],
      "purl": "pkg:npm/lodash@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-2.4.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.2 used instead of 2.4.1"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 9
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 10
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 7
          },
          {
            "location": "scripts/npm/clean-shrinkwrap.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a6beb6389bfee865a99e84ca058b5b5bc14fe45db56f45318cd92ec5f8f662de7e75271fbd01c490dc442c6a0ded47e852da18a07e038ffca97c92b8bf5f9d8"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.8 used instead of 0.0.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readline2",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aacf06186fa12c631a0ce1a377e9838250e861c1c3923218ef3e51534fc0a6c193d2aca9cab5ac90d79e994a83f94c485e26683184f968bc06a787a1a3266122"
        }
      ],
      "purl": "pkg:npm/readline2@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readline2/-/readline2-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readline2@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readline2/-/readline2-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "da1f2ad823f711e3a10c9fa377ddf63d13296b7fe9389146a05db627553f0cd6c42b68125b60ea785e3a563097b12417842fa4fe5f3f81a69105028bea150f7d"
        }
      ],
      "purl": "pkg:npm/strip-ansi@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/inquirer/node_modules/readline2/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/inquirer/node_modules/readline2/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-shell/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.1 used instead of 2.0.1"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jshint-stylish/node_modules/chalk/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jshint-stylish/node_modules/string-length/node_modules/.bin/strip-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab98bc6c52e0db00dfb2e479e9cd4dce52453f3543fbd9b1843ae1a8e1a280415af3b3991e517ef5d59e196cd54cfff4102880fc9506cdfcd1af6b7779839147"
        }
      ],
      "purl": "pkg:npm/ansi-regex@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.1 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx",
      "version": "2.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82f67aa69c88a735ec615bcf732478fb0e40c703e1e531d78fb60cd31836cd8ee929d9ed058c2f01233895453b9359f39d427c3bde37f957ac9c1bc4adf25f70"
        }
      ],
      "purl": "pkg:npm/rx@2.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx/-/rx-2.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx@2.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx/-/rx-2.4.9.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.5.3 used instead of 2.4.9"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "insight",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7d847e94315ab9d1c7648504b787893d637be16f2940ba87283caed3035c2d07db821850af67715dc8ea8a224bf7633403d1f36eac12e08c1014b1ce8999e7f"
        }
      ],
      "purl": "pkg:npm/insight@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/insight/-/insight-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/insight@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/insight/-/insight-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c8280e7884ff22661c834fcd533ac26242f475816f996125c5699500be80f8c021dd6c763669cb66a53138c77e3866516a1dbbe8c4a39a11250b4d937682cb6"
        }
      ],
      "purl": "pkg:npm/chalk@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "configstore",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9a30c8b77ab0d0c202fb0609d6d1a23320b022929547e13544cfad05fe7693f97b0f3d7e8868f12e17fcc3dbc5d234558efe61d0f4e551c64bdc49baba10574"
        }
      ],
      "purl": "pkg:npm/configstore@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/configstore/-/configstore-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/configstore@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/configstore/-/configstore-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "995e0c7fd89996ec0d4f0e5d53ddd32684054deb39efe280422fbbd06f57282855eee062deef9f77bf8949ad9f41119f8a2f9855232e9f1805b43dbd3cba63ea"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.2.7.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/configstore/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.15.2 used instead of 3.2.7"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/update-notifier/node_modules/configstore/node_modules/.bin/js-yaml"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59e7e33a2a4c8bb6dda35386bfb0488398a652eb96c6d1e9ed21fc1db84d228bf10b3bfbd2e93c4482ebafd55877b49011da87cd8ea3e41a9a92d4781c2bbdbd"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.10 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f2b052ac26d68eb511994ff6f75f1d378b21263b4ce353e7751c11f935c11a523b60ed73b4c0363923b20915faf6ae0b89b7446f7b6577db8dba65adf363247"
        }
      ],
      "purl": "pkg:npm/lodash@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.6.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 9
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 10
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 7
          },
          {
            "location": "scripts/npm/clean-shrinkwrap.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3cb7e5e61690a9ca6bcc166f0f1403e8fceb42a6829874b1d14fce111c53014f652ed59ba4fa714cfac329dbdb1df3d6fc11e140f6f4a3992d30da347a3443f5"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "367e1d04cf69c00ce8e464806df296893eba82a061dde95982b0b6e368f8d9c6caa649a79205fd508357782fbe7b4d77534a97ab9c68c1c074060930834f6cd2"
        }
      ],
      "purl": "pkg:npm/esprima@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/configstore/node_modules/js-yaml/node_modules/.bin/esparse, /app/node_modules/bower/node_modules/insight/node_modules/configstore/node_modules/js-yaml/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.0.1 used instead of 2.0.0"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/update-notifier/node_modules/configstore/node_modules/js-yaml/node_modules/.bin/esparse, /app/node_modules/bower/node_modules/update-notifier/node_modules/configstore/node_modules/js-yaml/node_modules/.bin/esvalidate"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d355f6de52942808dca839d75b09394c6272bc2ec2292c3ef68ed13a4a3c182f6251afb96c92a6cc821a9d4c5a7dc075ab640943598509d6e9f33e75963d640"
        }
      ],
      "purl": "pkg:npm/object-assign@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.1 used instead of 2.0.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.0 used instead of 2.0.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.1.1 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "osenv",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3de9c97b19b243fe36261bed70b45d55a5a86cff8971c1c87259d07932f6b7aea3e9a001efd89574ecf00b50ed443bafe3d7bf42316aec2302e5860f570d6b72"
        }
      ],
      "purl": "pkg:npm/osenv@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/osenv/-/osenv-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/osenv@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/osenv/-/osenv-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6a082229f104b9bbf753044da93ccb22766900e98acf0747a840665bf84103f9adf7d7a0f9be15ad7ea2f8844bc54f3e58961f6b7deb1b046c7a0e1e125520b1"
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/configstore/node_modules/.bin/user-home"
        },
        {
          "name": "cdx:npm:bin",
          "value": "user-home"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/update-notifier/node_modules/configstore/node_modules/.bin/user-home"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/tildify/node_modules/.bin/user-home"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/v8flags/node_modules/.bin/user-home"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d683df8e6b7a83d824331c83f8a8a52ac0d7f32a7f0fd0bb45868b5a09315c86c57b65f0e10326de8a9fc765578c229662f49818d44de7525c1a0a6653d6c12"
        }
      ],
      "purl": "pkg:npm/uuid@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.3 used instead of 2.0.1"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028)."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xdg-basedir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba0196fbecaf1a8c6be08ad2a31b22787d9bfcd9596d7b0168bf3939f7f7cf8f3bc92f5e8a2463adf764070d6206fceffd22b45e38d8cbe2818b1e4f22c78eb5"
        }
      ],
      "purl": "pkg:npm/xdg-basedir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xdg-basedir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c93bfcb43fec096a179e1efcd05f40fce333ce286080d580749da3c0875d5d29053c72aef010be60122996e16aadac3dc99b1e57042772477377bc068e88ef7"
        }
      ],
      "purl": "pkg:npm/inquirer@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.debounce",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9734862ae650853151778bfcd3d4c09f5b1d3176ac1d9d53637b7f371b97b1d72f51c29f9d4767979138fa0ecf59505d4a5d6621ee6308365bc05f06bbc303f8"
        }
      ],
      "purl": "pkg:npm/lodash.debounce@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.debounce@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.debounce/-/lodash.debounce-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isfunction",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e977000778b3790c4f39040d0096db7635dbbd612dd8f9fd7b33eb8ebe02c282f09aab0b55bb221170f5f5c9a6b7899bcce08e09d1f33908948af50e24badaef"
        }
      ],
      "purl": "pkg:npm/lodash.isfunction@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isfunction/-/lodash.isfunction-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isfunction@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isfunction/-/lodash.isfunction-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isobject",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1379b8366b53e889c6046570f93c175071394827a854b25ae55abee25743bb9fe8b8e7deacd8d43d23909a67915b5d27f26bff5642cad82c035426ff6969854"
        }
      ],
      "purl": "pkg:npm/lodash.isobject@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isobject/-/lodash.isobject-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isobject@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isobject/-/lodash.isobject-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._objecttypes",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e9a868757bb86190ecdfb417d613bcedf989fd9951c5903862715b6dbca2eca0230b5552fec534237e30785f8bedce76aec6fd106796407aa8ef6add1d87ad9"
        }
      ],
      "purl": "pkg:npm/lodash._objecttypes@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._objecttypes/-/lodash._objecttypes-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._objecttypes@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._objecttypes/-/lodash._objecttypes-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.now",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ab5247affb176a15b1c73d2895327ced59526c1c778475ad4826c8431b9e26d6812f98ee85dfb924311f5f9b278aeb22cf83f4125dcc8ee8be7a3a666e3508a"
        }
      ],
      "purl": "pkg:npm/lodash.now@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.now/-/lodash.now-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.now@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.now/-/lodash.now-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isnative",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "04e94a18a3478421ecc06396b6655be73072832c4dec4993bb354e49023a412a06846fa4befef58080854b54c1a67aaf4f59f9dedc4af020cadeee43dbf199c5"
        }
      ],
      "purl": "pkg:npm/lodash._isnative@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isnative/-/lodash._isnative-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isnative@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isnative/-/lodash._isnative-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e95248b1535054310e9bc141db3ae7b820619b7516f18be204670ef31e78b0efc7ab971aca1876e17cb6c722c237e4b19b1aacace903ab8d598b9c3da27bed4"
        }
      ],
      "purl": "pkg:npm/object-assign@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-name",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f97acb4b3b628df2f82d4d16882c8804181a01acc9d9dc943b5bd4cc6429ce206c077bc4d1192a5c6a09d60e8f837e177fcf4f24f577bbe61bdc88927c41a7b"
        }
      ],
      "purl": "pkg:npm/os-name@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-name/-/os-name-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-name@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-name/-/os-name-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/.bin/os-name"
        },
        {
          "name": "cdx:npm:bin",
          "value": "os-name"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "osx-release",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ec8132d4db30f50cf879ffb2a4160c6b2c8b3356895913e7d5b9f97a0aa49434adc478c07958a4d65d6fce87174165090df55c1cf56c3979863101137636acd"
        }
      ],
      "purl": "pkg:npm/osx-release@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/osx-release/-/osx-release-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/osx-release@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/osx-release/-/osx-release-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/insight/node_modules/os-name/node_modules/.bin/osx-release"
        },
        {
          "name": "cdx:npm:bin",
          "value": "osx-release"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "win-release",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4f567c04ff3f145576dd4bb51ae0adeb9fd0e3fd990c4c5e29e804053d918cd1ecbf41238b7ffe259d04bc5fa2808aee3dc8e5011703609e9332cd4726bdcc2"
        }
      ],
      "purl": "pkg:npm/win-release@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/win-release/-/win-release-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/win-release@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/win-release/-/win-release-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.42.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "669a90c90590ec0755bab8f1a663ff7e0a4ddf001906bb8ed86783df30e28d69a7aa0dd2633f5863ab990bcb4917ef88859fcfd9566466e83f7c512c840903ea"
        }
      ],
      "purl": "pkg:npm/request@2.42.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.42.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.42.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.42.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd7f42f2819b649f792f02722b85ef37d192060c3faea067520ea67a31a17ff18d7c9ba4b79b733973fe08989c5dd592a805f41136ae7cb0f15ee3769b8fe60e"
        }
      ],
      "purl": "pkg:npm/caseless@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caseless/-/caseless-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.6.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.9.0 used instead of 0.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c44a93fb8f5822df8177042d8572933a4a7b6ad10d7ba26aac619eaf104f88447a040ace222549b6965962958ea6ad883a44cf5670ccf02818be9a45a09370c9"
        }
      ],
      "purl": "pkg:npm/qs@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-1.2.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.2 used instead of 1.2.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7c784fa7cc5b40300d186254b17ff421ababcfd5ff304a867b030d46b9cb41726b9d08db935269b1e394df1299726fa723b193bf8ef87afb5569667db87b3fb"
        }
      ],
      "purl": "pkg:npm/form-data@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.0 used instead of 0.1.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc5dfa71bad4c9fcbb62bea44c8ceb8f746cb9a3d8789294dc850e0ba32095f353ca2193ea5786bc454e6b752c4ac8300737d57d19ef322315c949e95cda8df3"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.4.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.6.0 used instead of 0.4.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-root",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5de74109ee2a45c5bf5b231db5de8e8a3da2661cdf1ffa7478f14656c565730f1f8d037929b1cc62d36a105f7ac690468b062f66dd96b21e7810737f9b057f7"
        }
      ],
      "purl": "pkg:npm/is-root@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-root/-/is-root-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-root@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-root/-/is-root-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "junk",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efdf73f1b27e550e3118792b54bb0bb53462c46a4a5cbe97b2c46121226bacfeeecf67ba6d087d91d05da1cac6e8f1ecfe30954f01a8a076069af72835111770"
        }
      ],
      "purl": "pkg:npm/junk@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/junk/-/junk-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/junk@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/junk/-/junk-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lockfile",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "018399acbdd283a84c68ca0a69bf9709b8661c53f8f4deb446b458e07f2bb88582ce4c612fcb444d880368f8d443ebe3d2a8794655ad728457e5d70b9ec98c7f"
        }
      ],
      "purl": "pkg:npm/lockfile@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lockfile/-/lockfile-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lockfile@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lockfile/-/lockfile-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.4 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ee7f4f78a76669dc13b0723c88f55df37d92552a46ff0693e5fb73470683aa22fd6f5ba070db8fee71bb8ed7399b3fe8cf7ddaaf9ead25281d85ba5a482de68"
        }
      ],
      "purl": "pkg:npm/nopt@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.6 used instead of 3.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opn",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb3fc7b9521ea087460658c904d8aa803cf7897a5eb157840024ae4bcf13831a8417a95a791485a891adbdb3b61bb003cbc64bc8d37d0a813607e0130196917e"
        }
      ],
      "purl": "pkg:npm/opn@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/opn/-/opn-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/opn@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/opn/-/opn-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/opn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "opn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-throttler",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa306b8aab65c214b6a3f62ae2b53b650e3e632f55cbd77baacb35e6ba1fdaf897030c177318cfabc8cb5d5268b17ca03acdd666d2a72c4cd1c341725ff97d3d"
        }
      ],
      "purl": "pkg:npm/p-throttler@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-throttler/-/p-throttler-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-throttler@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-throttler/-/p-throttler-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promptly",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c6fb80867f10c872da3a592c1af0235233181162b8ce8066e1d094abdc5e32cb968af79a8900d6939d1abe53583f27687a20880b0fea913f30d1e009d487fd6"
        }
      ],
      "purl": "pkg:npm/promptly@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promptly/-/promptly-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promptly@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promptly/-/promptly-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8432c04ebcd82e832edb773febda4c0babb77cedd8d2a2d32328099046472ce9fe00eda049aa6ee9082b8305fd7a1c95b5a46865565b17822e8993cf45d1a076"
        }
      ],
      "purl": "pkg:npm/read@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read/-/read-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read/-/read-1.0.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.7 used instead of 1.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request-progress",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab918ab276724c5462e85b8ee46a808ea33a05861a27ede454ea5c0bc17ca96de42d6ff558550d10d77b18eb72583f26ffb2ecc7f3168cb4baa4ee03687ef34e"
        }
      ],
      "purl": "pkg:npm/request-progress@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request-progress/-/request-progress-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request-progress@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request-progress/-/request-progress-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "throttleit",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1ed95315ec98b357a50ccdadc62206b1d5c76aaf247df55a647fd010145ba3de7342ace5b01c7910b2a190f39955a77d38af68c73c31e94ad037c55f87ffb26a"
        }
      ],
      "purl": "pkg:npm/throttleit@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/throttleit/-/throttleit-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/throttleit@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/throttleit/-/throttleit-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "2.3.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69b2dd20a0a8b0a7e99e6852e763424e33b84622eca437ec9f7ee9ae3cc6ae9f629b90cf24e821f363acf76bedc0687a5dd42bc8a23fed244466757e6aa897ac"
        }
      ],
      "purl": "pkg:npm/semver@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-bump/node_modules/.bin/semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 10
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 8
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shell-quote",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d18e121fa9a7a0d64d5b6f693440b413517ffd7ec099ba4e8ff8f9a13b2c5c552f83627d31b288547dd2e5c6bc25ed47af7eaeb5726a97309b631118b0f011e0"
        }
      ],
      "purl": "pkg:npm/shell-quote@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-filter",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "556d05a422218d975aad68c8cfc569bdaed4f797e5d899fe6fe9a614530b9fc3c856c70e41c0201339f05334c4b941eea99a88c70cd195c68dfeead31454288b"
        }
      ],
      "purl": "pkg:npm/array-filter@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-filter/-/array-filter-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-filter@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-filter/-/array-filter-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-map",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d76dd732cccc074d50295a6da4343bc759b5a4fe4d989206d646e5d0948f3d17b3bf040287100dd06bf3a3baef475219dad38bdad9a2cbb918fca2a09e9555a6"
        }
      ],
      "purl": "pkg:npm/array-map@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-map/-/array-map-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-map@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-map/-/array-map-0.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.1 used instead of 0.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-reduce",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f2347e4ada9a0badfabbb877c9ed5ca3795045e7e0555510521b809916c3a8831e476cae5f346f902350890e49ff06d1126a012cdb69d7776169a5696500d153"
        }
      ],
      "purl": "pkg:npm/array-reduce@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-reduce/-/array-reduce-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-reduce@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-reduce/-/array-reduce-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringify-object",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "443197072e6deb2d5b8ab21918480a5b5984f9c1bd5ea5d04f6df028b21c333be6f33659ac25965312d99dd86e576cc9d590838e6fd09d6103f3feab7c8ce0e2"
        }
      ],
      "purl": "pkg:npm/stringify-object@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringify-object/-/stringify-object-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringify-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringify-object/-/stringify-object-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-fs",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32a99f3a2d1ce18729ac1f167f21369ca64f13fff6db9dcb42e7b296219f67a1f2f4be8de1033dcc93575d24a6a7e3df7658f20241c1df455aa66d1a15ae86da"
        }
      ],
      "purl": "pkg:npm/tar-fs@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-fs/-/tar-fs-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-fs@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-fs/-/tar-fs-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pump",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5344bb71d46e04b7e4d7294adf68dcf0da3c7b1dd78f6a24dd738f0187d75d77d5777ccc036053e5597b5f17ea5e8222a0d4b1733234fce18436febc5cdececa"
        }
      ],
      "purl": "pkg:npm/pump@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pump/-/pump-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pump@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pump/-/pump-0.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a2789a30ea06fddb5bbd644b0259057897893cce08784e813c5087bf419320838d07b03b933d7f96261642253b6ea021525acacb5675301b0a6bea8182855a6f"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58177dc838b7251ac4b32b21d2ce29c7e8e29cbb96fc3191c9d4be6463d31d52aee09ac80662a3dee0c2f4b7e7c046d71c554b89e52e66fba763be30967e9aae"
        }
      ],
      "purl": "pkg:npm/once@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-stream",
      "version": "0.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3f036886968ca757c43471be377b3f9a2b53c4616b9e52be323eb7a76f038947763add58da20f22b6af581e95718033e2341fcebe132d7f22dffb43864ccf47"
        }
      ],
      "purl": "pkg:npm/tar-stream@0.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-stream/-/tar-stream-0.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@0.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-stream/-/tar-stream-0.4.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "128ba591d285ff5c5af76ab6e4f6e3b8372027d4431d853646cdd2088becdbf7524370699b19de347980fccedf7bad0cdcfad5ee73464d335b90aeb697abd789"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.5 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.23",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd1d13b4d1b0dcea028669b31cd9cc561e8b458edf0a4c579c738423dfc2644e739fa4f365bc8c92765d9906730f4121710553ffdad91de8352aa8aa7c00b98f"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.23.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-notifier",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17567dc12077ab46b43001dc7ccebc2e9563b33a1cd7055157b984d25fef5b3a1266fd0071509f6622ec579a25317cba8d3870bbf64e4325c52189aafbbf00ae"
        }
      ],
      "purl": "pkg:npm/update-notifier@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/update-notifier/-/update-notifier-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/update-notifier@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/update-notifier/-/update-notifier-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "latest-version",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b70e1e0b39457dc6907264017994ca021d074dcf7ab5af641d3b9de9bda4c68895d4ca729b1d9a4783cc1502345100c3354cefbb255f3b0ab8fd0a756b5fde4f"
        }
      ],
      "purl": "pkg:npm/latest-version@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/latest-version/-/latest-version-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/latest-version@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/latest-version/-/latest-version-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/update-notifier/node_modules/.bin/latest-version"
        },
        {
          "name": "cdx:npm:bin",
          "value": "latest-version"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25b4ecf45d82c2a0841213595ecbe042d429366ce02a50a4e1a76163118e6f371cef4ad4d27cf2d853ea81374fd93a39c1929b0afd08269fb34cc60b127f5e30"
        }
      ],
      "purl": "pkg:npm/package-json@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-json/-/package-json-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-json/-/package-json-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8324153c73ea563d875a8f08aa85edb6a0f92af0562beb120f3dca092df9d065bbeb70e049868566bcd0717ea7c3ac9dc45eb777a57a7256f3d13cbbf82be3d"
        }
      ],
      "purl": "pkg:npm/got@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e205a6c2853aa3d50898b2f3abef11fa4cd64f400161d297baf4a9d3c2696338626c5bdd522acc7c4f67139c981dc1b593d0a5715b9e4784e8959a51bf0839a2"
        }
      ],
      "purl": "pkg:npm/object-assign@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6fa43112178e9a622c0b979316e059b14b9cae39f67eaa49a19f388a1c06c21e62c34ee18928de4e6ad844acd51e5a26da31e5497dff94d0af40968341995526"
        }
      ],
      "purl": "pkg:npm/registry-url@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-url/-/registry-url-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-url/-/registry-url-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmconf",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1bf03bfce67ae95c4e3bce8045b6d30ffde63b1e76cba5e9a73b03fd74513c8f688ec8ad2ee8c84d4ec7375c1fbba5302db30fd2d7e0f4b9f8ddaccbcb0f7fdd"
        }
      ],
      "purl": "pkg:npm/npmconf@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npmconf/-/npmconf-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npmconf@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npmconf/-/npmconf-2.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.3 used instead of 2.1.1"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "this package has been reintegrated into npm and is now out of date with respect to npm"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "config-chain",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0be58e2597a3418263713edc9d39d6246da66bdc3d212eff0613ffb37b88aecc862845fc284d9a489f9ae5fbab91c4e5dd137082bd09e3edb3cef335cc3b619b"
        }
      ],
      "purl": "pkg:npm/config-chain@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/config-chain/-/config-chain-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/config-chain@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/config-chain/-/config-chain-1.1.8.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.13 used instead of 1.1.8"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "429ff3feaaf5eec69faad7f9a4b9c5919acdc4f8e6a7ccd68c4e28d4fd7e427308e803e5cdd6e63a2b3321424378eba9388e237fae5c44934570e15aba685397"
        }
      ],
      "purl": "pkg:npm/ini@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ini/-/ini-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.8 used instead of 1.3.3"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to ini >=1.3.6 to avoid a prototype pollution issue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proto-list",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f9933d494df39024d694a7efef4bd3a166c2c8c34c6d35f1093ea1a465a3c1a1829714f54c32edd85db05899bd414e4952b1253af33b2f3b66814f87e2242b1"
        }
      ],
      "purl": "pkg:npm/proto-list@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proto-list/-/proto-list-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proto-list@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proto-list/-/proto-list-1.2.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.4 used instead of 1.2.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-number",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6622ed42b76b16f5955d6e7089c923b478b23a49fe706ef8074af7dc3436bc9bb3d7616c14eedd536ab476e9abad893a9f2e30976563b28769c64d3e675d3fac"
        }
      ],
      "purl": "pkg:npm/uid-number@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid-number/-/uid-number-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid-number@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-number/-/uid-number-0.0.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-diff",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "619f29f0416f84f1058427fd8871a10bc378c40f64311f19b9f61431d99aa91b15a39d2bc4b433847848f4101e7293d6097c25396b3822cb47b58946e52fcd19"
        }
      ],
      "purl": "pkg:npm/semver-diff@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver-diff/-/semver-diff-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver-diff@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver-diff/-/semver-diff-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-length",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67b6425079759a419ed6fe2bc9b8534d59b42d259e797d61278a55b17d23718342c0c26c2c1c837d55773d42799320bf6628333db50ffa71013426d9cdae55c8"
        }
      ],
      "purl": "pkg:npm/string-length@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-length/-/string-length-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-length@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-length/-/string-length-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6e5a2625260477d431a277cee3f77d08a47e1852cc57de138bbdd1a69d4026fbe056a449165cc5987100940d750d744b1103d1997af238abc52ccc37e8cc7c7"
        }
      ],
      "purl": "pkg:npm/strip-ansi@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.2.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/update-notifier/node_modules/string-length/node_modules/.bin/strip-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0a01227424478792450de40ec6050d491f91260468bc76197d2828425d5e349069b29335b8b8b91507c5db8d5ef9f7c88af88fc740e96a2462c2140fb5666cd"
        }
      ],
      "purl": "pkg:npm/ansi-regex@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13cedf750fde449afd5b55f8c133de8cdcbdcd35b7148dafa4265227f1c063e4e48ca542d13526d6393abe7d99eea6b2d03432d3e44119d5f18fe4669a219929"
        }
      ],
      "purl": "pkg:npm/which@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.0.9.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/bower/node_modules/.bin/which"
        },
        {
          "name": "cdx:npm:bin",
          "value": "which"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt/node_modules/.bin/which"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserstacktunnel-wrapper",
      "version": "1.3.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9c122c0cb866470ccdd8fcd3bc62d8f2d5c3531b501f41e1b789762d1aec9bd7b26a0fdfbc899856c42e83124140d25644e57dd2cbf647588bd1e1f2344ad95c"
        }
      ],
      "purl": "pkg:npm/browserstacktunnel-wrapper@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserstacktunnel-wrapper/-/browserstacktunnel-wrapper-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserstacktunnel-wrapper@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserstacktunnel-wrapper/-/browserstacktunnel-wrapper-1.3.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "browserstacktunnel-wrapper"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/browserstack/start_tunnel.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unzip",
      "version": "0.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0efc5dedb8f645c7db33e01b35fc7451faaf93b2a5e1819e0109441a7f7e8250d0cf51c5c5e7918c14adc62fc37c8be0bad9fa85b0b8c8c735ac4a37c7e76655"
        }
      ],
      "purl": "pkg:npm/unzip@0.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unzip/-/unzip-0.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unzip@0.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unzip/-/unzip-0.1.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fstream",
      "version": "0.1.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "375a4b1841e80f20a823cb8c98f5c95e19f6dfc2f89e4e358a2a570abaace12b34a28612af9b0d8f6b9c328e40a89542e0e68e6bb233b6906139a6984c6655b8"
        }
      ],
      "purl": "pkg:npm/fstream@0.1.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fstream/-/fstream-0.1.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fstream@0.1.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fstream/-/fstream-0.1.31.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "match-stream",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4db376d4aaef999e261f32aa48578d34d61e38634da04134b108e138694773e5ba5e15789c4849a9a413263d74e8d17e3588f227ba57876dfe390d5ddf4e8e47"
        }
      ],
      "purl": "pkg:npm/match-stream@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/match-stream/-/match-stream-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/match-stream@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/match-stream/-/match-stream-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pullstream",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f1c91ab9fc44ef8aed6f0034943d063b63e4fe68827e37b7b99b4665dfcc429c64a11201074d3868a06785d73863c2fbb22a74722b3f7a489bff5954c14c31b8"
        }
      ],
      "purl": "pkg:npm/pullstream@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pullstream/-/pullstream-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pullstream@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pullstream/-/pullstream-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "over",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1047371824f971ed9580b60a19ea264d28104fee30912d7761af57cca8ac907b5e9963f1d1885512b9fb3ed8a8c133ac62d46515ee8592c83015e586d5a38976"
        }
      ],
      "purl": "pkg:npm/over@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/over/-/over-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/over@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/over/-/over-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setimmediate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "191122a2e9bf9bb2e887945bbb36bda6985d67a57878d988b524efd42b95d55e7b0417b9592fa5ff730237fb29f53fd346b2b39b5988cabc59472fad6e67c0b8"
        }
      ],
      "purl": "pkg:npm/setimmediate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setimmediate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.5 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c9bb54d84ebf393991244f896a7025baa0f58f212e6898f9c8b01fdd2fb416a36b0d934dd543a762778a65861d32dd27f49c996ae50114477bcc61ebf2767ef"
        }
      ],
      "purl": "pkg:npm/slice-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slice-stream/-/slice-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slice-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slice-stream/-/slice-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "canonical-path",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbc10812f2fe216f354b885141609116d972fa0d5c7351bec311e98e1611f63236f892635a268a9e41fc9a6bcd1ce30e01df5fce00110cedc01338ee479d6a68"
        }
      ],
      "purl": "pkg:npm/canonical-path@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/canonical-path/-/canonical-path-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/canonical-path@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/canonical-path/-/canonical-path-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cheerio",
      "version": "0.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5a9102f0d786ed4bc4f8f90ddd8056deef1e38ee18ec41e121309da41e0f18ace2d298a4b4c4697d4449f3fde89ceddb314b44bd90c45b65cb2aae53004b475"
        }
      ],
      "purl": "pkg:npm/cheerio@0.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cheerio/-/cheerio-0.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cheerio@0.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cheerio/-/cheerio-0.17.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "CSSselect",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af81d601145b43a7a719b74f0ab9776cdc9b39121c53401c04b4f26b171635345de841f6ff0f512271e451b521c1e86b045375290cfec85ba5872207df565703"
        }
      ],
      "purl": "pkg:npm/CSSselect@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/CSSselect/-/CSSselect-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/CSSselect@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/CSSselect/-/CSSselect-0.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "the module is now available as 'css-select'"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "CSSwhat",
      "version": "0.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d4e5c606d3672b8d018337ac26f14493869fecaff314ba5313ad5035084352061bf707e9a525f6033f57a6ff0265313d1a61c5aca3472e4fd3575bbe323dfa2"
        }
      ],
      "purl": "pkg:npm/CSSwhat@0.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/CSSwhat/-/CSSwhat-0.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/CSSwhat@0.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/CSSwhat/-/CSSwhat-0.4.7.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "the module is now available as 'css-what'"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6645604bf3e9c63c8931bf92da25471c4663567394b631a9d3fcecb6a2864c4f65ad9b4d1e535098bc0ffe584b30402961bcdcd3c04a331f481692a16926d6d7"
        }
      ],
      "purl": "pkg:npm/domutils@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "861a8fc588b4c4ae62f5f04c1c481617189c272eb67b99f1cb435d9e3184f83aa8bcc714b146c83d2901cd9d8ee8fc18bb03464dfedb87f0cc2a631d0134ac4e"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.1 used instead of 1.3.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "update to domelementtype@1.3.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7afbe2ce82ed4f9b8ca434f788a440c753664c293665d383ec04ea98bdbb409902bfc5d09862affde16ebc08c787248d040091100717181aa8cd8855d5d39d6a"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cc4bc002c158d0378792ba96051912b2681a13bc800e0a5ecf8d095058c849bfaecd28a797617a41b1b894c1011383f4ea008617a567b329266cd82eed9207cc"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.0 used instead of 1.1.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d64adb08839faf5b382d2a803fa640082734407946ad9c89aa70ae02c877762a836addf0a0fed1c3a04ffb7bcd7246af5783c5d44af01cb1268c0a9e1adc7b9"
        }
      ],
      "purl": "pkg:npm/entities@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.2.0 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ddcae0811f7fed4ee45308c16895b8f9b2d2997a4f052bb2955e6f9a1d88af1e65d5a35f2320dbdcda3479ce0164a7fff3d8a5a5e6fa694c9e035a196d62bb8"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3051414051a4c93b8d7b7bcbf56130f497650b0228058a4e18448b79902f73f8c295836c3a5e8fd4acdebc96d683be86a2f744c9c7d1effdbf45aecd9eab4c2b"
        }
      ],
      "purl": "pkg:npm/domhandler@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "812bb93a2fc8fb7c0310d06c39606244ad5ea06c5ccb0612aa0deb47deb4ffe11f634085e045f554f9201ce6775a24bf260d83b65885e8185670795fa5851c1b"
        }
      ],
      "purl": "pkg:npm/domutils@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.7.0 used instead of 1.5.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2db2ea7d7809326cbcd6dfbb735e269ee9451c9d7bd1c33a13ed2f31747d93f662670817f22e693608d3097dd23b855e52c14b57ef089e2c68adeb7053e32305"
        }
      ],
      "purl": "pkg:npm/entities@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dgeni",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afd81c3d2f8aa4888e829635909cad4ab54a96fe70cc5bd85788fb0e3701221155da1c487af499fab24fb1bbc4b8910be35fef0fe9bf27fab86da570a8158abe"
        }
      ],
      "purl": "pkg:npm/dgeni@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dgeni/-/dgeni-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dgeni@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dgeni/-/dgeni-0.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/dgeni"
        },
        {
          "name": "cdx:npm:bin",
          "value": "dgeni"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.14 used instead of 0.4.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dependency-graph",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb72311d56f4f18bb97dc3f919fbbf3ee675a0631570cd0fb468ea1f372e16e82a5e85e7b58fd3ae88b072884cb9e4e3407baece581539ff01f7831590352408"
        }
      ],
      "purl": "pkg:npm/dependency-graph@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dependency-graph/-/dependency-graph-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dependency-graph@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dependency-graph/-/dependency-graph-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.7.2 used instead of 0.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "66a1ab0206aaa9933b2c64733632e7c397a57af59be4cf0b1280cc69dc485b73966dcbfbdb030c80a77038aa5de45ab17bc721a0b0fc1cdde24a3dd3521fe089"
        }
      ],
      "purl": "pkg:npm/underscore@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "di",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8969a98791a81c66d1cfa822076719c5ad796e9d05e004eb19494396c05c37d5024201bc930681cc5bbe58393babe59371f2921e00a81fe8658881aaaa88b84"
        }
      ],
      "purl": "pkg:npm/di@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/di@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/di/-/di-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6d300f74efe578426c55edd6d1bdbe3ff0c69100b2baabd01b89dde774c6276f2a3ca628ac0a678e355a95497a9003729a3f848bb796fbb9de84daca8ff1317"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate.js",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87afca29e07e53b9936ac287dab09872a4e1bfcedc0af76d792fad70fd08cc5831f09c436f2f6f8f40ced93c6480ae6040bb3ade5c91f63fef52e109ea7514bf"
        }
      ],
      "purl": "pkg:npm/validate.js@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate.js/-/validate.js-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate.js@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate.js/-/validate.js-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.12.0 used instead of 0.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "winston",
      "version": "0.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8954d3f2d7fd6274f27d95fe684523d9f97a58145eb7bcdaeaf76331ec85f1203cd158a2dabade3395c7fb9aa6a4157db891a3f23cfc068cef4c372ba15abf78"
        }
      ],
      "purl": "pkg:npm/winston@0.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/winston/-/winston-0.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/winston@0.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/winston/-/winston-0.7.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.7 used instead of 0.7.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ac495b472bc22bf2bdfe171c3f6f88d2d592cf5e457a6710d1250cde0fbaa8d12a8c5d6ac70ccef50e06333cc1d8f12149d00a3e9cd536a75326c1dccaa8faf"
        }
      ],
      "purl": "pkg:npm/colors@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-0.6.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 0.6.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cycle",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4d517ab2f37379008ea630aab32d3f092cbc56039b1b7c17bac27bdf15b619b1b9ac6c7b942f33c4349446272c5c8d94b06762d8bd103510a2ef8e7fc140efb0"
        }
      ],
      "purl": "pkg:npm/cycle@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cycle/-/cycle-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cycle@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cycle/-/cycle-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eyes",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a2a723ec5ced5a9f36b400e65dcbaf489bb846142341ed8fcd1a30e564627718924bb703526f6bebcd8ad360946b465a15c7ba65f9b85469307cca271c3ef15"
        }
      ],
      "purl": "pkg:npm/eyes@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eyes@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eyes/-/eyes-0.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkginfo",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "438b9915f6ac990ec66a06ce01c55718a95c2f62edd3503b32dfaa05dd467a8e218aaa3c93e486f8d12211b4d1d91d548db1d050e22907b16d257737e8f2f8cb"
        }
      ],
      "purl": "pkg:npm/pkginfo@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkginfo/-/pkginfo-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkginfo@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkginfo/-/pkginfo-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.1 used instead of 0.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.16.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4df0f890ca38d24c2e3a93bb1987c06696f6c18770ef2bd322094f3603cf4a6a76173e8c28dbcf2e56b8d0543fca9761cba0768d1373dd59428cf0fa9a7cec98"
        }
      ],
      "purl": "pkg:npm/request@2.16.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.16.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.16.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8feff2ece45ebef83b0abbb89a72b8aceeaabf019496697fa04f876d4b253133cd9e3f15b168fed2968f3664edd94f1e8648ac501c0425985bccf1ef8377c64"
        }
      ],
      "purl": "pkg:npm/aws-sign@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign/-/aws-sign-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign/-/aws-sign-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info."
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.1 used instead of 0.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-jar",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c889a4f4063dd318e852c3767d61e8221560bde5ea899bfb2c3a944d91335411f2cdf6b2f008dc2484d4669cf67d360b87aae73feec6a208ae442a3fe63d9ea6"
        }
      ],
      "purl": "pkg:npm/cookie-jar@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-jar/-/cookie-jar-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-jar@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-jar/-/cookie-jar-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21ab164912257cf9c1658d4af631142b73f0b12711e26adc2be68d049cc6a0f9d6f92f5be9ff08f127321f871e84438536a9e31a93f6802680db682a495d7140"
        }
      ],
      "purl": "pkg:npm/forever-agent@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "0.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67dfcfa53fda8315e2f349cca4e1fa1850fb5ceafa9b09396963310edfca318f8d9bb7b816744c8dd74ce3f98b3c98699a9e9a958d45ff5250a5113acf4ef19e"
        }
      ],
      "purl": "pkg:npm/form-data@0.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-0.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@0.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-0.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "0.10.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "063a669d9f79a1dbfb28e22cc9d7cd4c0c5f18e19a55ceb16d82f87e8cd6978e4f5a30eab248b1d0b1c07a49869299eb08023af80651bc9217353025963f9eeb"
        }
      ],
      "purl": "pkg:npm/hawk@0.10.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-0.10.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@0.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-0.10.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c13004f1a3d307def50cb104d577dac3fe6e483aa6ef018426a508cdad79d014de95989e46fbf390b64eedf2b705e6a2602969279398ba7407aa9e49a7bc6b49"
        }
      ],
      "purl": "pkg:npm/boom@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-0.3.8.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "0.7.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfbe66b9693af72ca35a7ea737324fd299df81c7b0b524eceee068946500ee458d742619ba4cc79f7b18a948ab857ba5eeaa7d581530353ffb89e25936f789aa"
        }
      ],
      "purl": "pkg:npm/hoek@0.7.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-0.7.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@0.7.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-0.7.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "608d0fa61cca95fc6836f6943e991ff31f9352cb0c26298bd693c81208fef164b1d0f42d7deb189acfddb9af119fe2995aaa022f80317311d9252f6777fa0b3f"
        }
      ],
      "purl": "pkg:npm/cryptiles@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfdd2d916f1521d5f0637e41240588a5959dfe1f960bb4ee7e2ce050eda3b4e636d62b08a3c20ff397f5cc9f26285f28efb571a3993e1899946781faa6156dd6"
        }
      ],
      "purl": "pkg:npm/sntp@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5524aec4401ac0a2d894269b40e47b6038a343af733ea4013ab894b8280d86502ab54ed13ebe3580fa5a4ace96904bbe64eb547aaba95d66c8e75092f99fe031"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e03b620fae02c0f279bd9eb7ea3fcab4cec3c566d7d4a964ab06ea6c4031237042a41ad076b28ebfcbc2ff7e94ea07e6d4255aa72e9099c5713e75cf3d00294c"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29b3ab42b3f961efb4826abe870c682700054701310025aac318f520314582a3b0f4fa31cb7c3049b69f77d66a3fa4faca431f9f1339ef792dfdae22f726dab5"
        }
      ],
      "purl": "pkg:npm/qs@0.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d7cb8ab53c7f3c04ad29706384317140b25c81b915b3d70c4b7cf5d395815de357b25208ce00b69519b589375ca68db9c1ce35ae9d548a9abacc321f282da64"
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stack-trace",
      "version": "0.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "be351ceac7e0b6063477109d9dce3498ae8e7ed8e8f7ed8af07fcd1bcd5332180bdfdd85b623c0f6d9fd44bc93c579932cf24f8c5dd5cb3169e9bb1614b8ac31"
        }
      ],
      "purl": "pkg:npm/stack-trace@0.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stack-trace@0.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.9.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.10 used instead of 0.0.9"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dgeni-packages",
      "version": "0.10.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72bc3a7a04346775043bfd567f48faafae1ea92b84a8904456de0be8bc601aaa5007ed0f62bbd09da72fb06c56f0e59885b90153eefa9bafaead0ad92e0058b4"
        }
      ],
      "purl": "pkg:npm/dgeni-packages@0.10.19",
      "type": "library",
      "bom-ref": "pkg:npm/dgeni-packages@0.10.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "catharsis",
      "version": "0.8.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "876c1acad7e1e3130a1513ab94995ee98ab1284857926d9a320f7bfd4ece67c6e1990727eb7b9533229e9ab90ddb4bb243ca6de44a5a124934b54978e06d0cf0"
        }
      ],
      "purl": "pkg:npm/catharsis@0.8.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/catharsis@0.8.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/catharsis/-/catharsis-0.8.7.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.8.11 used instead of 0.8.7"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore-contrib",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "393ee56a5d2c401c3b2b3d7cb82eb091b1ea041b8960581d7a127e5b567dfbd2728a9dfcac1b5d43db484da5db2639b0b37b833a4cd3efe23a579a0d847da5af"
        }
      ],
      "purl": "pkg:npm/underscore-contrib@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore-contrib@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore-contrib/-/underscore-contrib-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf8a357ef294a2321687d5ee6952d40dd7fce91422ab5dc00b57661db4e9a32baef9baae1e6b3beafd7a0a3c9c09b79cf3b27bcf493ffd2890564d2c31d166a5"
        }
      ],
      "purl": "pkg:npm/underscore@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.6.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.8.3 used instead of 1.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "change-case",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf6e8a809ae2be3d4cb7ca88a49e3317dc9ff25647bdfe845728f6b67df4f5ab336c773127bfb5c8f3b34a4f2db8a222d74181a4cc3f81fd16c00134bbb9cdd5"
        }
      ],
      "purl": "pkg:npm/change-case@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/change-case/-/change-case-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/change-case@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/change-case/-/change-case-2.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.1 used instead of 2.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38813e29961d118aadea9f049f2d129dccb209eba67534eb8769c6b578b647137418e05d132347a326669f9d575498ff2b5273adbd3435086fa660b03d1949e9"
        }
      ],
      "purl": "pkg:npm/camel-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camel-case/-/camel-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camel-case/-/camel-case-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.2 used instead of 1.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sentence-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6e3427069510ccade9be34940444bafbdc1d5301d7585ebadc687e4e81dd48d3386c11674b40d4d81d47fdbac9f4316beddcb687372de9a8bba26bc908aa2a5"
        }
      ],
      "purl": "pkg:npm/sentence-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sentence-case/-/sentence-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sentence-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sentence-case/-/sentence-case-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.3 used instead of 1.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8dfafd83915a0528ab4b2caccc63d263313667211343b15f4d1413f6d717f7b4c8760a1752299320e607c00cb7852e95907ebd2f3d21ceec8f15731410cb3270"
        }
      ],
      "purl": "pkg:npm/lower-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.4 used instead of 1.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7ad8eb2dc252138fcd159822654245fce0c0ba76e83a22b1fd0d1a988518602218e451e4c759a34a8480f90ec71d959f4ed707603a5e2eaf3ac81e42ec6e37a"
        }
      ],
      "purl": "pkg:npm/upper-case@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.3 used instead of 1.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "constant-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b449a039237102f085ec25e7da38dc287ef39f5fc26f354f02ace8e751a45ebb4ab4e0df496028c9da55008db2aa59523128f5b6ae4595e42b8e2edb7a0a50d"
        }
      ],
      "purl": "pkg:npm/constant-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/constant-case/-/constant-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constant-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/constant-case/-/constant-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "snake-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54da315a1d9b6b7dc75879a949c5a124932fe27f2664095945526cc4714303b6630c3e652c168f8baae8958b3b06ff0f6de90cb186cc52d36d47e9f767dd6139"
        }
      ],
      "purl": "pkg:npm/snake-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/snake-case/-/snake-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/snake-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/snake-case/-/snake-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "005662f922b872b0428cc71a7f2777e7c486dc462759ca4bba98f5bc0446c286a9bde707ad66a6a39bde53b9538ca774974f0e6e106abbf6dd57de9119df5463"
        }
      ],
      "purl": "pkg:npm/dot-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-case/-/dot-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-case/-/dot-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-lower-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "705202965c96a9aa3847cb0ea4a43f759183c4a6a54d67cabd0b54d03d05f5e54728faa5da1728f51c22c2cd42c1c94714add186c437be1f632a2d599a97e9a3"
        }
      ],
      "purl": "pkg:npm/is-lower-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-lower-case/-/is-lower-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-lower-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-lower-case/-/is-lower-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.3 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-upper-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f299d5fd70d0e179ef4e2bba4b84a816c281ff047641dccc3ab2c0e7461b0a8971f1b5d168389dcbcfa8199350d884a7e3c2e91d895a552c68198612244929d2"
        }
      ],
      "purl": "pkg:npm/is-upper-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-upper-case/-/is-upper-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-upper-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-upper-case/-/is-upper-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case-first",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0db5b42f8dff84ae810d6623cc0ef72dcdec72ea30c6a9ca4fa73ce57a2e31295ccfc226233bc54a897f342e2c30f97a9622b3c0d967a2914259bba9a3213921"
        }
      ],
      "purl": "pkg:npm/lower-case-first@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case-first/-/lower-case-first-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case-first@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case-first/-/lower-case-first-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "param-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6310704f2321259acf11ab91706ebc278a08ddab1b7ae35eb73f9617d897dbb14455ca1a58b7f0a9c3a6cc8f675a800c93d28ceaf92367300649a8812c9c2b76"
        }
      ],
      "purl": "pkg:npm/param-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/param-case/-/param-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/param-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/param-case/-/param-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pascal-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e8e4f4b2814d73c68a4c41bd0449ef8248765f809abc1672042f914c9ee59a979b6ba9da26ad876fe7f6ea548ac19677290960a2a718d600f47f9976807510c1"
        }
      ],
      "purl": "pkg:npm/pascal-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pascal-case/-/pascal-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pascal-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pascal-case/-/pascal-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20b8526e3ea34e04a0589a3f399b5d2ea7ae16776a72d3bbf0d279f5a4150665066566afc73a8f6f17c5bfb0808d0475215c156b7f68de390e63e0b2569167b7"
        }
      ],
      "purl": "pkg:npm/upper-case-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case-first/-/upper-case-first-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26d80545f90fcd18f7e1d7294f153be417e6932e22d6edac8de2f3c0a953cd23c3ad4369b3995d17a984c43f859d9c1cda5dfdd2e5448569ed9c6cd51be60d92"
        }
      ],
      "purl": "pkg:npm/path-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-case/-/path-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-case/-/path-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "swap-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11c7f23c6c214974cb2de0fc127a5d708ecf633855c00e1539f12fc655759208bba07ed210f46d72ec4b0cdee6a90484cd7390cb4df4ce35f3c8bd99f5b87331"
        }
      ],
      "purl": "pkg:npm/swap-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/swap-case/-/swap-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/swap-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/swap-case/-/swap-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "title-case",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0e93f5f3265abebd0a61a68a2c40580053daf5f7b86d3ff0a8db9a6d9d7a06479012087bc25a7c9aa7c0bc4a8c09339e8e3d807fd64a6140c69fa81d81018a4"
        }
      ],
      "purl": "pkg:npm/title-case@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/title-case/-/title-case-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/title-case@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/title-case/-/title-case-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.2 used instead of 1.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8556f4cf0119c02d455d22913c54de3ad37b000ac9709948e942c62edaecb5ab3028d96b4c9a8003ed65625494a29e2f8c0e36df1941cea7d54b78961a5a89fa"
        }
      ],
      "purl": "pkg:npm/glob@3.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5855f58c8d406b13536553872c155acf04d629a423a32912cc204d5c1ef6bc34c2ce8a501adc8ff75b4a7452b972fd7ea8cc0fca24eed47a94ae2aa9948f2970"
        }
      ],
      "purl": "pkg:npm/minimatch@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b4ec18935e15855011f4697390c96f78a75dc54c37dbc68b715a83e6b9a52e340a81437917ce093b5da9c6880931e63f71d4c04e337623cdfe527a59baf43e8"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.6.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.7.3 used instead of 2.6.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2"
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.8.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "841c448370985defab3c8b9af044deeed986dd70e7f41d1e74e13f7bdc07da72dccf1ce076ed26d1a34763ee701598af88b58b74034f253b2c6bdd9d31c5d0e5"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.8.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.10.1 used instead of 3.8.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abd6d4c237e9ec489ff235b1c713d2ca47516406fa1a482e0464a0bef0ab848f7007bd56d8afcabefe04eb5085fe67027e75490de0d6c7f55bfee02a6c38fa51"
        }
      ],
      "purl": "pkg:npm/domhandler@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.2 used instead of 2.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "16a97b3d7e829903559a82dfa7b0e59af14c20be5cc0b6e6df4d92c9c03688032bf79b752135f88a522c506ef9ad8b4c8952dbe04302e5bda8ec0a44a485d13a"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.2 used instead of 0.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08fc1d3ee8ebb99431c926e7b224816647f63216caeecd736c9469250e62d651bc1a98f858e5cc5b1540f5d8ed71edb04a91e5d706551fbb2e8d3095aa192bfb"
        }
      ],
      "purl": "pkg:npm/marked@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/marked/-/marked-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/marked/-/marked-0.3.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/marked"
        },
        {
          "name": "cdx:npm:bin",
          "value": "marked"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.19 used instead of 0.3.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-html-encoder",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "662b92c1e577828268ad83a41bb145029c6afc13e489254807042a47fb620c1abccbb4f2d8643838e99c9204921d2417841a01e9172979717a627f383e82ca89"
        }
      ],
      "purl": "pkg:npm/node-html-encoder@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-html-encoder/-/node-html-encoder-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-html-encoder@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-html-encoder/-/node-html-encoder-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nunjucks",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "837dd31999a1fde8dec7a3e630abbd2ee61dd5543f97b5cd077ca1d3d107a801d5fda91cfc9948c939f1e0f8f7c765d18805447a43b2db8ef49f708c8010d153"
        }
      ],
      "purl": "pkg:npm/nunjucks@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nunjucks/-/nunjucks-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nunjucks@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nunjucks/-/nunjucks-1.3.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/dgeni-packages/node_modules/.bin/nunjucks-precompile"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nunjucks-precompile"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "potential XSS vulnerability in autoescape mode, and with escape filter was fixed in v2.4.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "0.12.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cc42a4f8dcd278e9873be70c7da50ee9ff287383fe6a5c73dc8072947132c275c52bd7131433dd92498e2c7c6369276cd11d0a94b24d619e53f8196f269b403"
        }
      ],
      "purl": "pkg:npm/chokidar@0.12.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-0.12.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@0.12.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-0.12.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies."
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.0.0 used instead of 0.12.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f803a1a8b16b28ab1fdc4ea85a1633497fd83c4673b711e2e96dd353a2e8405b998f34ade6da884ddd19261d90cb7bec5a8163e874c810144aa8f892ef41f38d"
        }
      ],
      "purl": "pkg:npm/async-each@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f50467a8f555bc9e67701a8eb848a45080d359c04baab555078a33a84c3608a6a24634a53ae496915cbde2a9affcb66549f637e8298faca13ce7ab470eaee4f"
        }
      ],
      "purl": "pkg:npm/readdirp@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "5.1.1 used instead of 1.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd9f89cbc9555a5beaa9e33c89907bc3b2a6424a099fc763339f39cfcf2bcb0ac46f3a2a6b055af45479a768700fecbbe277ee28e8e636f8bd82d58934ba87bc"
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.0 used instead of 0.2.14"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "0.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "def9669f541a3e8a929e19e8acb165a77fabddd50267c79995a7b0f87f1086a07ed1805cf474884e1f70899a3be8a6181314c2f43c06ea8b44fcecf06c12d523"
        }
      ],
      "purl": "pkg:npm/fsevents@0.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-0.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@0.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-0.3.8.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36411397c4988bd53282c35a40d37e66410fa5be1363da84329f4c26fc4a166ca5e8b89dfbea0a7f45044ef019e9217067fcf5bd438b4e2737fc25c5e5f18cfb"
        }
      ],
      "purl": "pkg:npm/nan@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.6",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22ba49fb2a06e04387f03156b9583ef07d645b539aa1fd16c5eedc3dc5d6df1f418e437f795a39e05d792f2a9e9a70c8518b24416afdaaf97f4628664b2ebec5"
        }
      ],
      "purl": "pkg:npm/semver@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/dgeni-packages/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 10
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 8
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.5.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b6162b12496f12e932181c788c1cdd0dab376359f4de91d3290361494db4569d030b3b5451217101f5e55960e9687d89a3640edf6370a1a05bb4f4c788df095"
        }
      ],
      "purl": "pkg:npm/shelljs@0.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.5.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/dgeni-packages/node_modules/.bin/shjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/grunt/plugins.js",
            "line": 5
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 5
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringmap",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "991d4b1070f0e93b076be2f025e78173d66a66a10e9bb6c789d8313260e0f0707fadb0351e10de4f4f204baec20821bfc6b8087d0c79b56e36a5df2f1692d4a3"
        }
      ],
      "purl": "pkg:npm/stringmap@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stringmap/-/stringmap-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringmap@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringmap/-/stringmap-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-stream",
      "version": "3.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75d0029f55447df0fe9ef6e87ecf20b3fd2a2590bd82d1062c6f96ca413ffeb8a74a960b49a4ec9cdf7a795415fa01dd52157f9d5b7150d282dce8eb029b8433"
        }
      ],
      "purl": "pkg:npm/event-stream@3.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-stream/-/event-stream-3.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-stream@3.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-stream/-/event-stream-3.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b31359fa58f2f9103599a5e851179ea81069042e912ca9a0e5ec3357ec7e99211399636829d64deaf7108e915139e9b36b6de1185b2426d14da14594690f91e1"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.2 used instead of 0.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "from",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eaf471f1e47de974629dcbffe4e21535be63c464626aa423746abf55e0e6e09beec051f681ba63166d007e0f1baa61714d3d733fee263681b49340bdfb2be712"
        }
      ],
      "purl": "pkg:npm/from@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/from/-/from-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/from@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/from/-/from-0.1.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.7 used instead of 0.1.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-stream",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0a4610acf6197d69eefc3026542a53497ff11e9299f3478a87694093203a0094de7fa6d6fba2696d064de6ba1fba6edd6be4b23756e2e5cb539be9537dc096de"
        }
      ],
      "purl": "pkg:npm/map-stream@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-stream@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause-stream",
      "version": "0.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b71419572e637f0f54becc7cda9cfe04ff867ad281406b73b4e75aadd69c5aec310958a0328a5eaea5855709669d127ba8a9ae0f91cf68531f73b3161e46ff0"
        }
      ],
      "purl": "pkg:npm/pause-stream@0.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pause-stream@0.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "split",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b4a4aabe5141f65eafec5db62964165cdc16b0b1f0d9edd82ff89b514d43cd72f17908c47863d72f26a90c634328c56cd31ef66ecf56de83aa4d10a96cccf89"
        }
      ],
      "purl": "pkg:npm/split@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/split/-/split-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/split/-/split-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad3d3448f9d357246c692cf9ce048f99afda1d23a2739535a6b858751cb91d2da44d9be21699838338a56edb09b318aba2a00299acb29c337ff55cc86d7e433b"
        }
      ],
      "purl": "pkg:npm/stream-combiner@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt",
      "version": "0.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d62ab7ca52e3cd7ab3fca4aad4e004daa867a5c6e41765b286c41c6af66df989a0bc7bb411b3cc1211a1cb682bd053faee2b07a5175fc230795957975dc25e99"
        }
      ],
      "purl": "pkg:npm/grunt@0.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt/-/grunt-0.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt@0.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt/-/grunt-0.4.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "grunt"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/grunt/utils.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.1.22",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dad1339622667f97c735a7cdc102c95d46ac1b340255cb6fb0d9179a79442c7c32a54d29d3cfeb1e8858be4a8a223c97a71fb4ae4ad8bfa41b849f9417842406"
        }
      ],
      "purl": "pkg:npm/async@0.1.22",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.1.22.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.1.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.1.22.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coffee-script",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4234354f806ac87bf5f64e9749f761cbf40b9483a1cb0cf47a405409af61ef5cd830995f0d319a9ff675257cd8919eaff11f8686f2ffa781593db3d6f1635796"
        }
      ],
      "purl": "pkg:npm/coffee-script@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coffee-script/-/coffee-script-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coffee-script@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coffee-script/-/coffee-script-1.3.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt/node_modules/.bin/cake, /app/node_modules/grunt/node_modules/.bin/coffee"
        },
        {
          "name": "cdx:npm:bin",
          "value": "cake, coffee"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "CoffeeScript on NPM has moved to \"coffeescript\" (no hyphen)"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "1.0.2-1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "017bd6f20eed3b88a59391e039678398f8bf64f6829cc27ef42835237a75f70ea672f0005c1bae1845c0c726c2f838e3d4f4995221d4732a18bbb5a77825fc81"
        }
      ],
      "purl": "pkg:npm/dateformat@1.0.2-1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-1.0.2-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@1.0.2-1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-1.0.2-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter2",
      "version": "0.4.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2bb278c6ae71003e631ec18ce517965d14c56b72511a87c788c715810f0f470816c738c7a4c582233b26c9feb4fa687c28bb2a60f72350c6b4002e2177a94fc9"
        }
      ],
      "purl": "pkg:npm/eventemitter2@0.4.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter2/-/eventemitter2-0.4.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter2@0.4.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter2/-/eventemitter2-0.4.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exit",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "664fde34a576cdb8e92b3aec43e9f51baa6855b12b4312742c13895da299d445622f31fe86b2eef5c757238cf0f5d05026c970044a5b4363f5a12ee70f1b3a8d"
        }
      ],
      "purl": "pkg:npm/exit@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exit@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ca37ed7d89c5e1385812f28457f904151d79766b725d3021def427ce9254a1cecd6a3e72d4fd0293b66cd7e56ba1ad34137293dc862c93be7a4bef1603974d2f"
        }
      ],
      "purl": "pkg:npm/findup-sync@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getobject",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "84818405f9c7719a569173ec0157959a9603bdfcbf99ab55974df2398f7514f9a7a420b5d8b9b98b33710a33b794701e3bab9a4f0331bbb838e744a29279618a"
        }
      ],
      "purl": "pkg:npm/getobject@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getobject/-/getobject-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getobject@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getobject/-/getobject-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.1.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00d872d95dbeb45a516a3137c0de03864350d3c283af422bd6a2f5dbf7147b9f9aed24c42bc8e45b8a27518b98f3fd3aa8016e4f98deee68c0ab3c7478a236b5"
        }
      ],
      "purl": "pkg:npm/glob@3.1.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.1.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a24d4679bd9fb6655fa1ef55c0830092bbaf8d022ce1154dd8c3c682fe11f9490dd29c84aa12a01e938d22980146b4373024a3615ef498fa1cc8a259cbc1c75"
        }
      ],
      "purl": "pkg:npm/graceful-fs@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4a7d71128c201f1507a5d932ea86bd7c344cfef948965480348f01f3b3629bbdbddefabf86fde56145fa196da3c22f43e7111bcae5878c821d363b879e9ee7f"
        }
      ],
      "purl": "pkg:npm/inherits@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-legacy-log",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f53c934ea1e99d8521533f08947df5fa183fc1a4ababf2c35ea2e06481da7a298c40b7585b2bd8d2c2f60d0244efe1ff281e941b56ada8a3add401967110ae6b"
        }
      ],
      "purl": "pkg:npm/grunt-legacy-log@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-legacy-log/-/grunt-legacy-log-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-legacy-log@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-legacy-log/-/grunt-legacy-log-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.3 used instead of 0.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hooker",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7e51eac2b10be24b29802270f4d4fc3e0e7feeb26cf5b113bedd9935fa5c7c7a0f962a90f6ba57305aa1c72f4f9ab1e441afedfebc88621b52b5253c1a21c4c"
        }
      ],
      "purl": "pkg:npm/hooker@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hooker/-/hooker-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hooker@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hooker/-/hooker-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore.string",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85b0f93226ed86e0c0bb8c80e70c5eb396f3160a9ddcfa4126e0a56d1c5a35d7717ddb33faa7fed641f0ac6405ae67219831dbf62354fba1070e7f2e8f4c4326"
        }
      ],
      "purl": "pkg:npm/underscore.string@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore.string@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.3.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.3 used instead of 2.3.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-legacy-util",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7173db7c5f1a33ea6fbde41e3752bcef60f97d19b7d317c9599892eb763c5bca3220f2c2942b2623c6d6f7a4f1ab369cf5cc8be2546a10185b849de7e44cd451"
        }
      ],
      "purl": "pkg:npm/grunt-legacy-util@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-legacy-util/-/grunt-legacy-util-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-legacy-util@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-legacy-util/-/grunt-legacy-util-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "0.9.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d56edfeb8caeb68126e17a10d528bd2f95a8a67b86352018b12fe6ca78d7e86382f6cda6ff8c6af153a29ad39b4c03fcc1c644e4e6dde2beda6177262ea5ccf"
        }
      ],
      "purl": "pkg:npm/lodash@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-0.9.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 9
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 10
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 7
          },
          {
            "location": "scripts/npm/clean-shrinkwrap.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore.string",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc5566857a9e96b8fa81f829dc19fab4e6af26f5b474d1f64fe85e4c3dfc251c48ac06e2bb36ea8e49ecce83988f70f2141d675a22e3db4f10b769e8fcbe1c20"
        }
      ],
      "purl": "pkg:npm/underscore.string@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore.string@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a19855a0690658f3709b862f800c89e8510f04b67e811b97e290cf6cc9e3a3425b6f478e61edc44a27ff6ebd012e0fad48dd48eeefbc9871ed3f2e12950a543"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54429c224b1c903054860d894bcef8c55a2e88f932c15521e32c9498b0837b5660ddb09de8cf85d5e18f7a73de1cb7365c2f29a7d1bc6ecba87cad0d784a9190"
        }
      ],
      "purl": "pkg:npm/js-yaml@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-2.0.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt/node_modules/.bin/js-yaml"
        },
        {
          "name": "cdx:npm:bin",
          "value": "js-yaml"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "0.1.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2e3982d9d369767d8be14cf2a1a22bd7510b6282e7dfb645cbdcce6eb4051ec4ae39ea5e50430a9ccf30e4a2f84e7ae9da0cbcf2b46e42de8acbc0639a5f816b"
        }
      ],
      "purl": "pkg:npm/argparse@0.1.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-0.1.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@0.1.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-0.1.16.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "729d28410c998543359292432dd18ed633d91e04bf329ce85987def7e08cda1fd0183665ab04f64f7606ba4b8175a349fc200fa1ec80651447cfc245a35efabc"
        }
      ],
      "purl": "pkg:npm/underscore@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "underscore.string",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cb191a6ee09a2019f37c8bd7de407142a0acd1aaff6df2700e71441c9526fd9ad15614f7208b5d445e5c6630112f3127c9062d21486c6762c6da3dc789d14e15"
        }
      ],
      "purl": "pkg:npm/underscore.string@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore.string@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/underscore.string/-/underscore.string-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-bump",
      "version": "0.0.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a15c73398d643f63f48462f62d74aad30c0c18168c7bf712c5fba0edf89cd95d4fb87319654c3d0e03a7f4caac7ec809331e9549528c240285d15fd58efffe9b"
        }
      ],
      "purl": "pkg:npm/grunt-bump@0.0.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-bump/-/grunt-bump-0.0.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-bump@0.0.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-bump/-/grunt-bump-0.0.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-contrib-clean",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b82508dbaad802e7c39dd4addabc5ebee2d685cd68a4b45063a9723e725e2d5483159824b51003ff1a98f64581d36df9dcb47f0909d06e62b4370481e7723467"
        }
      ],
      "purl": "pkg:npm/grunt-contrib-clean@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-contrib-clean/-/grunt-contrib-clean-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-contrib-clean@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-contrib-clean/-/grunt-contrib-clean-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-contrib-compress",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbca2ec978a843014e60a434d07f3228f797aee7d9e5547082a8e7d0b17330cbb7f5c3c8c0427ccfa00daa75707c3b73107692fd34e75da92b6e8c906f2e2808"
        }
      ],
      "purl": "pkg:npm/grunt-contrib-compress@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-contrib-compress/-/grunt-contrib-compress-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-contrib-compress@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-contrib-compress/-/grunt-contrib-compress-0.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archiver",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25ec36bd3d380dcd83491ecdadf4cb0e9c2819856097d31726efc1040c1d336e3cbfaed270819ecc0f0ca875486b407e69ff9bd12de604f503d8734fded3363d"
        }
      ],
      "purl": "pkg:npm/archiver@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archiver/-/archiver-0.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archiver/-/archiver-0.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "965de5d1acf1ba139d3deb7bbd7b83d641d0ec16345d0b8edfb004f107f4a1135b0fe720e83821e8adeeea7f995c6b478e060d8e5f2126bcb1405892e96ebe3c"
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.13 used instead of 0.2.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazystream",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e02b0edd30b532d1bcb3ba42c6fc27ea82b432131b2778aa3aa81835b7c491397c11abe394054bfb59b788612b2a27dcd4cd3e58990a708ef0baa86c6267d8b7"
        }
      ],
      "purl": "pkg:npm/lazystream@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazystream/-/lazystream-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazystream@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazystream/-/lazystream-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zip-stream",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6deb31c01697aeebd6a0c5cee380b948ab662785d05191acf41a075b813e14db5592e187aad50bebdaf4b3a44a480f5ad3342ce57c10bc6b03f8905a0bdff6b2"
        }
      ],
      "purl": "pkg:npm/zip-stream@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/zip-stream/-/zip-stream-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zip-stream@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/zip-stream/-/zip-stream-0.4.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.2 used instead of 0.4.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compress-commons",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e248ed60ce91d433e5002872be4c74929aa005231fba9aaeba8cae79612da427b4538b03bed4bc1d1cd703ce0101da20752987f8e5a68e823a58dcf9c087528"
        }
      ],
      "purl": "pkg:npm/compress-commons@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compress-commons/-/compress-commons-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compress-commons@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compress-commons/-/compress-commons-0.1.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.9 used instead of 0.1.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crc32-stream",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "187875d2afd4b53beb81330cc9cd4b1c4a7aca8dff75f93ffef08d2ca10501c18d5762435671048ea74b777412f1c775a4543e2cc276627b8f6d4e9c0036ec62"
        }
      ],
      "purl": "pkg:npm/crc32-stream@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crc32-stream/-/crc32-stream-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc32-stream@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crc32-stream/-/crc32-stream-0.3.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.4 used instead of 0.3.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettysize",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12e2f6f32670dc6a555ae5c24a3f9c7557c165b5d795f0feb1b1bea4bf411ae38a445bd4da122f00d71689c29bc51c49430fe78afdd5c71e9f095c643128c40d"
        }
      ],
      "purl": "pkg:npm/prettysize@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prettysize/-/prettysize-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettysize@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prettysize/-/prettysize-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-contrib-connect",
      "version": "0.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d4b155d6e641b77ad4f2178e7f256241ca8cc55bb9330db912fda385c45eff1d88213b64af6be8f3d0aeeb47c15418552033c1588df3b7c0a194fb8fe81f7d1"
        }
      ],
      "purl": "pkg:npm/grunt-contrib-connect@0.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-contrib-connect/-/grunt-contrib-connect-0.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-contrib-connect@0.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-contrib-connect/-/grunt-contrib-connect-0.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "2.19.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d70d92287a3ee7e0959f75c71495c536f6feb3c86162110f85db31b2ab79c24e3555f37de5b078be449d3122d05b9d23536cc4b458769af76ea07d79149fb5af"
        }
      ],
      "purl": "pkg:npm/connect@2.19.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-2.19.6.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@2.19.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-2.19.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "connect 2.x series is deprecated"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "basic-auth-connect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92257efc34e056ba3869989f63f87047000b04849588be4d3f869179a47611524439ba5b5011c891d261fd8a5ca04898b7b9c1a1d67a5366a365e66f4b15020a"
        }
      ],
      "purl": "pkg:npm/basic-auth-connect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/basic-auth-connect/-/basic-auth-connect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/basic-auth-connect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/basic-auth-connect/-/basic-auth-connect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3dff1dcae6193e6535837ae4f62b4a268d2680f2ecd3d79ada7861fae5992d46cfa87412adca3901d86c3e788612a8e5bd6050e4f30038ef2efc91527f3eb96"
        }
      ],
      "purl": "pkg:npm/body-parser@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ff1ebc5641cb793977fcb97c22fc5dc3386b4fe23229ce767bfa321e1036470a8faacc129e355b49d75f3d1c00b09b5b8a53003d2456c00969c5d62c49639329"
        }
      ],
      "purl": "pkg:npm/bytes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "0.6.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90dfb235d01fdbd260a7e0181d4982ed7e107493d1f1ccee3162cd2dcd1a471910eed077bc940438d28a4fda2efeb5bb11ba9579cd75b2b0bdabd06255b7271c"
        }
      ],
      "purl": "pkg:npm/qs@0.6.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-0.6.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@0.6.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-0.6.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.0 used instead of 0.6.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c87d6135ba9cb369027ad3198c218ebfa5997b24505c4f9f621382e75e42ce50fe10ec8d92578c1a2251fd3a1d152baeea9b5214319f78579ee0d96ed5e91a4"
        }
      ],
      "purl": "pkg:npm/raw-body@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-1.1.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "No longer maintained. Please upgrade to a stable version."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ebfb1f1f86e7d098524564c7bf57468647c8c9fb5622460fb6988d44cfc6e7fe3945accd988f1669e13beaf0503993628d56249a6c6a393262c0171132505b43"
        }
      ],
      "purl": "pkg:npm/type-is@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68fdc1988ab86403c9b7a2b2c14e476e21b45300931d90362561cef5a2dac72afc3a13ce88ae113d265c4ba4c34bbccdcc60c2dc00029eafd74ee12c77f3352a"
        }
      ],
      "purl": "pkg:npm/mime-types@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df9f0f3958bff37faf3ab698d212cd8b5b3fec6ededcc89929596b622bb8db68165a323500a0576b8b105e7a1860b032076f6351da3c6ea14bec2e095fa9019c"
        }
      ],
      "purl": "pkg:npm/compression@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "719a8aa8edd55edb88679bd02d573c33a2431554d9a15c19ae5993080d671fd128379bfa656592b4abddd40e515a976e4555c3e79a71dedef94ef4bb25d2df1c"
        }
      ],
      "purl": "pkg:npm/accepts@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e48590e888c64e09b3113df0c08a58726fcb044c38473fecc3094bfe243dba3923cead81beffbeaea287aacf7593561ec1bd0138d5557460c4c6294827f4642"
        }
      ],
      "purl": "pkg:npm/negotiator@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.4.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac2c14225a589373322703ee3495056381a4bac62adf7a613148f48ae271a6645aec55721724f2e0ee12d83c61780f0b05665c777662a2d091f46644d8f2f2cd"
        }
      ],
      "purl": "pkg:npm/compressible@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1de96f842104cd0db327764199a9fd6aeb1dcf94cc40228b9fa0d85c7e9bf3ad786d37e216572336b2376c677a7e4d575db531b9bb496e8d382567e475546bd"
        }
      ],
      "purl": "pkg:npm/on-headers@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b72c9e1b8e8d41dc3254ffd1b162d2ad3efca2ec04bafc24f602bcbd02b88dd5e6aa85ed4d75bebec09f35c9ea4618a017ca25577e105596ab9808bac0157633"
        }
      ],
      "purl": "pkg:npm/vary@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-timeout",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f09e6dc79d054019c5a4b58892ece98aad3f2bef50dfc56d3d425be5cc19f4e70d430945b17ba77d41bf1e341e00a604c335c1313617def1023f736b96d1d04b"
        }
      ],
      "purl": "pkg:npm/connect-timeout@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-timeout@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "debug",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e55c4266f7d62c4632c9f319aecf42eaf18530aefee100991312bebf126dec525494365d1474503ed52ad8e1f9f291eab5155914114b704461ecf55be561b18"
        }
      ],
      "purl": "pkg:npm/debug@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-parser",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32c4d89c92ef62b9559f6bf28eac58721d8a4905711a613a8f9428bb348c9aa4b6544420ad0a9e94f2ea2216aa44a440de90da0ee66494b85a99fc041453fd05"
        }
      ],
      "purl": "pkg:npm/cookie-parser@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-parser@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fcaccacec9b43a582e628bf4d4e94ea53917e4c84129499f2ff28cba6ed1f34acf2a179bf40c14cebefc4f0b41b7539d6e75abb785fec316d37dc4379e866a1f"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csurf",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e94a6e372ffcd7f60cda92b49ce890a2abecf1acfe7365bb3224f595dec59f5c6900d589b9c55c05a00ae9c3fc3782b7e24431e401a02e55223b7af90a472086"
        }
      ],
      "purl": "pkg:npm/csurf@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csurf/-/csurf-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csurf@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csurf/-/csurf-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csrf-tokens",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "135c0e7d7624aa5500770c16705937401984ee1f49e7fb3a58126de0b431e337846fea326f1fd40d34f0b2a17fe51e46d075de8df97b884de79a38f350fcb2c9"
        }
      ],
      "purl": "pkg:npm/csrf-tokens@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csrf-tokens/-/csrf-tokens-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csrf-tokens@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csrf-tokens/-/csrf-tokens-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rndm",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c2642339236d69687eb44fe4ff0e23561294db83f173cfd13bccd74d99b73690f8db9fc9412867b1a860212cc8e818747ad73cd6a7c1befecdf1993c5f4d259"
        }
      ],
      "purl": "pkg:npm/rndm@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rndm/-/rndm-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rndm@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rndm/-/rndm-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 1.1.0"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.1 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "scmp",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9ae2c3ee50e7dcac99df0be394a9316015504430e5cc4b55e8a67d30c088712b00f87af793c09a0850df6ed501c9e3b9cbdbdfe6e78e5d57c2aa23dd8c9473f"
        }
      ],
      "purl": "pkg:npm/scmp@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/scmp/-/scmp-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/scmp@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/scmp/-/scmp-0.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "scmp v2 uses improved core crypto comparison since Node v6.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "uid2",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e6048fd658afd741a3a7c70c12715deac87390bfc3e96d6e857485342c430be608f3e2fcc2409809b27b9fbec4cdbe3013fc7332881e704f83b5a9847bd3d98e"
        }
      ],
      "purl": "pkg:npm/uid2@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid2/-/uid2-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid2@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid2/-/uid2-0.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.4 used instead of 0.0.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fd6ee7d723342f09ae15ad32292efbf074b847fb0b81b6f209240df183355c6951131a64c858c7c45d011dd4ae29f0169199024f9fa30fbaddfc1fb610fa220"
        }
      ],
      "purl": "pkg:npm/debug@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe97377a1ed35a8ad3b5bbd783c8dee06bebbc4a827c7ecf0373fb896d35c8bd84e7714a8b1ce03016908b434e3db309a98df87014af474b59b6695391d506e0"
        }
      ],
      "purl": "pkg:npm/ms@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-0.6.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.7.1 used instead of 0.6.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errorhandler",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e38502abccefdd88e6e0f9a3d92fd20f894cdeebac5a2eaf7fba74e3e04d2fe5181b31c8b11277ac3e4b2ee2567b47ddd5e75520be12ed1af4e816744729b64"
        }
      ],
      "purl": "pkg:npm/errorhandler@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errorhandler@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express-session",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b35dd41e9f2606a6b574f65a18df3aafcdc0575515268afd67bebd74926381b6c82532564156bf16471324e3f326196899f18674163f4805fb60900e18fe2881"
        }
      ],
      "purl": "pkg:npm/express-session@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express-session/-/express-session-1.2.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express-session@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express-session/-/express-session-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bcc7c1211a7fc23969b9e4b3ed26f43a63bb0b9487e7c49299bb13f06e03e3c61f3bf6606ebdbdc4d5cca595520b5e2e8d525fad9647d4197e91761140fbaf7d"
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6461a2f0644e2bffe28e6da0077dec52e37d4e3375b42fddbc6e01b788fa216ad51a9326b9d5010b1c7e22beea78fb1d4447e4a500b814bf16d237923ac82fd7"
        }
      ],
      "purl": "pkg:npm/fresh@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "method-override",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55d5e17a155b9107090f83098ac06a1630862e5090e5b855909a93f55a52817c8271cb24984627fcc039da99c396aa9f7e69056b38c66c51306452b038800a5e"
        }
      ],
      "purl": "pkg:npm/method-override@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/method-override/-/method-override-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/method-override@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/method-override/-/method-override-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db8d3731f9d5ca9592348129990dbafce6d9e64494c77ec4f0d1d1beb8b0d3e23c4a77bb9341c6b8b1829343ab0aa511878508ca00f4712b18abe2e5fa4ccda8"
        }
      ],
      "purl": "pkg:npm/methods@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e96f7ed3ef4885acaac23829e0e68b2ea677283b6a3d8d8fb543f3f18362cb83da9a326ffbbc7a27d18ef773bdad464e2e069a9d33f1b0a4dab31a8a90ed624b"
        }
      ],
      "purl": "pkg:npm/parseurl@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "morgan",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "271d696479db678dd3140798d0d56e2eaa5e5d7d0ed9a2fbb6877014ca1dbe98d908647ebc14ca1f4c0e2908f02b5c203bf7044611484887f8ae84a3d5fc7926"
        }
      ],
      "purl": "pkg:npm/morgan@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/morgan/-/morgan-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/morgan@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/morgan/-/morgan-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multiparty",
      "version": "3.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17eef3d89cebd0e955a45f974df43af028e444b8cc7521d163e1a242168064a791878f2a933f7b76cdecdbd74c14dab3d9dffdc443a4a1f9da0a3e98b97db528"
        }
      ],
      "purl": "pkg:npm/multiparty@3.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multiparty/-/multiparty-3.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multiparty@3.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multiparty/-/multiparty-3.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-counter",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a3036cca73689751429170ec57426844c7412fdd71c9e9cf32586aa14235b0846aea3704acbeaf589512e0a06b59e4ac762e7f7821e75aa89e46506e9a05bc4"
        }
      ],
      "purl": "pkg:npm/stream-counter@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-counter@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pause",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "286f14122115911df01846f89b9c999150b38a0003f9c54425c9360b36193b7ed91897dcb6f569b553b5f76330aed3e1cce367ea0a3cca59ce74c84aaa2e277e"
        }
      ],
      "purl": "pkg:npm/pause@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pause/-/pause-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pause@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pause/-/pause-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "response-time",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d4f783fd68dc3d682fe1cd4ba5f87ec21c603b16ae31c91664c58124d5415e0e12cff311d5bbed03657428eaf881839b929d465b6372ca236c26434cb533addf"
        }
      ],
      "purl": "pkg:npm/response-time@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/response-time/-/response-time-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/response-time@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/response-time/-/response-time-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-favicon",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "111ecd93eaae7be3a0ea40c9a400e32cc913925941296cfd14f79fe40fae10b89800e0d38da30932ccca873533b0d72fa97339fa6cc0769bffe856b14652549e"
        }
      ],
      "purl": "pkg:npm/serve-favicon@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-favicon@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c1e777921bed70778a6351a5cfe132cb2ff2e6a839415ef6248c2796c4ddc3bff41222184f4c3f5d81cefa920e4f9dee628e8c61259d242e6c619d9448710b6"
        }
      ],
      "purl": "pkg:npm/serve-index@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6afb432414b1965079406a615b5397605fae8e1cbfc881a0785b2f2ba52264b53cea75a5aac35c668b5429dd34d70ae5f4c999f50232572f16155104a5121ce4"
        }
      ],
      "purl": "pkg:npm/batch@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5a3842586278664f68959c31dc3ee9659ecf9d1460b5f011ec796d59ce475db4f59ee0eb7f65d89f3c5624d78afeb5d5a954d5ad5c2951444350f4e0ddd447a"
        }
      ],
      "purl": "pkg:npm/serve-static@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e5dff88ab65a7558cd210f269c927b4e570c7991cf06113ff38048fd00e6115f989d78cff7dc5791624e0bd7d22a8a81b10a4c474b2ab53d3855b3a3d5be4fb"
        }
      ],
      "purl": "pkg:npm/send@0.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finished",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1cf27cc7b1a7d699934b5cd6c8ca17990d72c479181d1a05b0123ae8e36ae0f4bd896049cb5887617392a8c58da7792c3177eb0697a7912c01865f561b8cebe1"
        }
      ],
      "purl": "pkg:npm/finished@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finished/-/finished-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finished@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finished/-/finished-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d6aff7933f99c26aeb5a925c082ac167726707307504c0391155bd9f19c83f52f10d9d7a0aab3d55da25a8b5a51317add6f53e6daaf75929006b8fd8ac0f5b23"
        }
      ],
      "purl": "pkg:npm/ee-first@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vhost",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f9a19c523b60d43597dd40166536bc4b0060e0d411204fb9e337bddff570e574aa0dcefd34cdeca18146398d1ef41ba91d4eb174c4ecc44909e7bda27f4dde2"
        }
      ],
      "purl": "pkg:npm/vhost@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vhost/-/vhost-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vhost@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vhost/-/vhost-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-livereload",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cbfe1f0dd72f78742c5574c9780afc1c72f0ba5e4cdd5234ef5a446a8bff8e20b3d8722b999ca7147b8e9f509f43c7ae52c7634753e9c2c6fd9a004e4a28f7bf"
        }
      ],
      "purl": "pkg:npm/connect-livereload@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-livereload/-/connect-livereload-0.4.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-livereload@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-livereload/-/connect-livereload-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "open",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f97fdd2582daa553b555b0badb40e1b4d64af54e3f91055a4d0a7f1a1edc6fa5132d87c6673cd4d995e45ab380ff006b7f852a005c2d2ea5d84f17b8b529d641"
        }
      ],
      "purl": "pkg:npm/open@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/open/-/open-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/open@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/open/-/open-0.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "portscanner",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6047a1df85efa3163dc2ea086114c68f8c2a2c5035995ace525c6245e80d01c46bb86e04e85c3a2729e983020e19840bcdd469b637ae856d8ca1af90ce1609ce"
        }
      ],
      "purl": "pkg:npm/portscanner@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/portscanner/-/portscanner-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/portscanner@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/portscanner/-/portscanner-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "006544e96711b165f842e760ad585d0d4280802bfaec4c26ccfdf2127cbf008eff5aa33e27c092b7031b1aa7970bda7c8a1e2aa2d6b4e0468c8a6fd6bc0f0e0b"
        }
      ],
      "purl": "pkg:npm/async@0.1.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.1.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.1.15.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-contrib-copy",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7fc18f751d32a01b7c955b8dcfde9a2fee91c36343190f22b83ffc2cff9b4a93fef9d56f85958a49dda31502cfc845d9503f2319ae1b3fbdfb1b8afa3997e18"
        }
      ],
      "purl": "pkg:npm/grunt-contrib-copy@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-contrib-copy/-/grunt-contrib-copy-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-contrib-copy@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-contrib-copy/-/grunt-contrib-copy-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-contrib-jshint",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3625a4cc5f1133d231162bfb60b0caa2e34e74dc05dceb7418d8971578e4738463b84f36a4a0b76a3e3e805197f2121ef9df8195600c28f853d9078d0c0bb47b"
        }
      ],
      "purl": "pkg:npm/grunt-contrib-jshint@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-contrib-jshint/-/grunt-contrib-jshint-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-contrib-jshint@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-contrib-jshint/-/grunt-contrib-jshint-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jshint",
      "version": "2.5.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5dbc6ed47fb7d7a96b90af9eb1bad83c704b5256cb7749ab40ede16ce8b3b2087b5dee801218db0fa359951a8d6497b0768b0a20e914f93b0f55c472b61d1099"
        }
      ],
      "purl": "pkg:npm/jshint@2.5.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jshint/-/jshint-2.5.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jshint@2.5.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jshint/-/jshint-2.5.11.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-jshint/node_modules/.bin/jshint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jshint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli",
      "version": "0.6.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e07e88cd893bf11f9505e2777c7dd541e8dc4119063d1fa432303d9f7d2cac437e61530f24b1dfa100ed2eab88cdc2e77eb954ad503ca9241107d7dd816a5407"
        }
      ],
      "purl": "pkg:npm/cli@0.6.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli/-/cli-0.6.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli@0.6.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli/-/cli-0.6.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "757df52e80a15d9eb388c74111939107e7631e2183c25b62609fc1e0ea230186a7339d78eb27e80480dfb5dc8eb4f6f95ad28d88ac0b24dd88227eee8a89576d"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.8.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.8.3 used instead of 3.8.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.3.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "372d0a3787724fc652084d1faed71b0091a833f1d302ba723e47a58b5ff4d1a61f9b4b1b0ff1a4ff8c7b3760cff50286a41b22407ee7eaba66d4befd46dbe211"
        }
      ],
      "purl": "pkg:npm/shelljs@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/shjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/grunt/plugins.js",
            "line": 5
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 5
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd1cd0483bbc6150e82edd5c5457f39c24ba634c315a9849886ebed9df582d94092a8a22791a156b9d7c44518afcfee6f59b0dc8312292738991d3d0bbb7b157"
        }
      ],
      "purl": "pkg:npm/strip-json-comments@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-contrib-jshint/node_modules/jshint/node_modules/.bin/strip-json-comments"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-json-comments"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.4 used instead of 1.0.2"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-jscs/node_modules/jscs/node_modules/.bin/strip-json-comments"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-ddescribe-iit",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e7895d2f6d9227e282b36eccf07fe124aef6b304278e894d19f152f326e470807ff3b4eb90857965e6c70f79231fd29cc53ff04d24b09c8677518ed55a10d890"
        }
      ],
      "purl": "pkg:npm/grunt-ddescribe-iit@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-ddescribe-iit/-/grunt-ddescribe-iit-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-ddescribe-iit@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-ddescribe-iit/-/grunt-ddescribe-iit-0.0.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.7 used instead of 0.0.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "2.9.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "17abd6483749459e6629ec9c59fefe97cd626e99e346d433dba7814d4c63a5eb7db54a4dd2bcfe4d5eae3b4082c921ddb56e1d0d93414aa6db30aa313c286a63"
        }
      ],
      "purl": "pkg:npm/bluebird@2.9.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@2.9.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-2.9.24.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.7.2 used instead of 2.9.24"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "win-spawn",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78beeca9df5f5d6a6f57daf2cc640987bd777b05a7b6a72670cda98f9fd38a487c0327979303d877eb414fa47e0a7ec88c69897e8966aea59c9693427f883c19"
        }
      ],
      "purl": "pkg:npm/win-spawn@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/win-spawn/-/win-spawn-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/win-spawn@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/win-spawn/-/win-spawn-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-ddescribe-iit/node_modules/.bin/win-spawn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "win-spawn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "use [cross-spawn](https://github.com/IndigoUnited/node-cross-spawn) or [cross-spawn-async](https://github.com/IndigoUnited/node-cross-spawn-async) instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-jasmine-node",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "030bb4dbb092a9f8148703d6350d88a956ee304faaee1c7b55bbd72b7356b2ce6a51cb2340a5f6b9059c3244ce0e39b7dfe82870a544a8ecca8ba50264e1de19"
        }
      ],
      "purl": "pkg:npm/grunt-jasmine-node@0.1.0?vcs_url=git%2Bssh%3A//git%40github.com/vojtajina/grunt-jasmine-node.git%23ced17cbe52c1412b2ada53160432a5b681f37cd7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "git+ssh://git@github.com/vojtajina/grunt-jasmine-node.git#ced17cbe52c1412b2ada53160432a5b681f37cd7"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-jasmine-node@0.1.0?vcs_url=git+ssh://git@github.com/vojtajina/grunt-jasmine-node.git#ced17cbe52c1412b2ada53160432a5b681f37cd7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "git+ssh://git@github.com/vojtajina/grunt-jasmine-node.git#ced17cbe52c1412b2ada53160432a5b681f37cd7"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/grunt-jasmine-node"
        },
        {
          "name": "cdx:npm:bin",
          "value": "grunt-jasmine-node"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "git"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "git+https://github.com/vojtajina/grunt-jasmine-node.git#fix-grunt-exit-code"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-node",
      "version": "1.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a32b3b0e2698178e74419d05866d00442452f51d30643f6049c126d6887d944c70f22e96dd9ea9be7d462bfc927c82219a1a2db85bea323658353d8097c9b27b"
        }
      ],
      "purl": "pkg:npm/jasmine-node@1.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-node/-/jasmine-node-1.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-node@1.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-node/-/jasmine-node-1.14.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jasmine-node"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jasmine-node"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.14.6 used instead of 1.14.5"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "jasmine-node 1.x & 2.x are deprecated, with known vulnerability in jasmine-growl-reporter pre-2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coffee-script",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "903b3417fe94ad63d5ee84ae00e4ef24d6a31810e90f7ca342bac6d8d43fc4d18ee714236ab8c06dacdcce8179d6e5441bb0d7cf8a9206dfd0eeb074139881f1"
        }
      ],
      "purl": "pkg:npm/coffee-script@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coffee-script/-/coffee-script-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coffee-script@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coffee-script/-/coffee-script-1.9.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jasmine-node/node_modules/.bin/cake, /app/node_modules/jasmine-node/node_modules/.bin/coffee"
        },
        {
          "name": "cdx:npm:bin",
          "value": "cake, coffee"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.12.7 used instead of 1.9.1"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "CoffeeScript on NPM has moved to \"coffeescript\" (no hyphen)"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gaze",
      "version": "0.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc82bcd594f6d28f57d0b3876031a8e4f86ae856904630e304dd8a91b612c656979cdd560c7d0ea74b4f4e1a8d540f199e637f4d83597c61c0564053add78121"
        }
      ],
      "purl": "pkg:npm/gaze@0.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gaze/-/gaze-0.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gaze@0.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gaze/-/gaze-0.3.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.3 used instead of 0.3.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fileset",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af7a5acc9fe0e2fc7783bd14e2059d50677e8162351293336d45a038827faed41c67211e6a1400e9b0203b52971809fa0bda45125ea62761589943f5b2d9f576"
        }
      ],
      "purl": "pkg:npm/fileset@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fileset/-/fileset-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fileset@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fileset/-/fileset-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-growl-reporter",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe13529536ddef9c5bc628a55b28cb1e65a0be31c5698967015c4e463f6b461466c49c953dd7e78ded113d2b6e313318d83008330c4374a49c8b4c43359d481c"
        }
      ],
      "purl": "pkg:npm/jasmine-growl-reporter@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-growl-reporter/-/jasmine-growl-reporter-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-growl-reporter@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-growl-reporter/-/jasmine-growl-reporter-0.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 0.0.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "556bfbb35108e35006d8b882afbb80bb15a290b0cdd5240eb8451cdfb77f3f7e0d008218824bd662780dc3477d77d882ac314bd1260213d510a718488e3b6e2e"
        }
      ],
      "purl": "pkg:npm/growl@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.7.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.10.0 used instead of 1.7.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-reporters",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ffe65487cdb4a5452f44ecef5d63d2c1472d052fabcf5e8f5e935d996100c40e764fd54b4914af6d7b28030d1c79fd42362331fb5780ecbbe340c54f172bdca7"
        }
      ],
      "purl": "pkg:npm/jasmine-reporters@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-reporters/-/jasmine-reporters-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-reporters@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-reporters/-/jasmine-reporters-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requirejs",
      "version": "2.1.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "47e76c3842c1b9799fedcea453a8ff00f1e7e50bbc5dfeab6903ac198fc18e551eafd78bdf3844cfd1defc6281b5d03a3ab427bc0a173afe0ce82c5bcc7a10e9"
        }
      ],
      "purl": "pkg:npm/requirejs@2.1.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requirejs/-/requirejs-2.1.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requirejs@2.1.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requirejs/-/requirejs-2.1.17.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jasmine-node/node_modules/.bin/r.js"
        },
        {
          "name": "cdx:npm:bin",
          "value": "r.js"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.8 used instead of 2.1.17"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walkdir",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a278f6c0b557acc5b1fcfb6f6f57e86f02eca14fc06a1f961f371dbb58945c329a257d761d642c4c5ff8d53c1405250bbcd7fe12360c5e829e3cfb77c7c15c5c"
        }
      ],
      "purl": "pkg:npm/walkdir@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walkdir/-/walkdir-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walkdir@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walkdir/-/walkdir-0.0.7.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.1 used instead of 0.0.7"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-jscs",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d341f4962b33d566cc08e1e7f68ec5abc56b149ed040cc2b3f9a2f0d2f0ef30ae006f45f7c7d1753d290e014baf1fd0ab708c7d54c183b37aed625941fcb2f35"
        }
      ],
      "purl": "pkg:npm/grunt-jscs@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-jscs/-/grunt-jscs-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-jscs@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-jscs/-/grunt-jscs-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jscs",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d01897248a45c71648c8dce357905261712ef59f6d75bd8af42a9a7ef065e0f6eba7f044a0f352a336e3e786c03415d70a50314eda3873aad7cc9787a2d90ad"
        }
      ],
      "purl": "pkg:npm/jscs@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jscs/-/jscs-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jscs@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jscs/-/jscs-1.10.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-jscs/node_modules/.bin/jscs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jscs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "JSCS has merged with ESLint! See - https://medium.com/@markelog/jscs-end-of-the-line-bc9bf0b3fdb2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a451abc5385671643632c033e91b607967b834ada4504d567ecaefbe572d74823be39116f48d327e5aa17bbfbe3392c473b6d5d9cffdff9cdcf2c15ca4bd03af"
        }
      ],
      "purl": "pkg:npm/colors@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5eca1adbc6ecfd95a8ff640f0e953c5f981cbb5f2f7d170d5ab9b4292f6b305e291511921a2738f00e66c62a854e76c536a4c83db0d9a811af779a12ac7656f"
        }
      ],
      "purl": "pkg:npm/commander@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-harmony-jscs",
      "version": "1.1.0-regex-token-fix",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c80f84cbee13a344bedf5b24fe28aa2d8762d6d56a5af4f57abc517e0d9d69fe5226be880356e0c5a767571abbcfdac1df0f8abbb9bcb686939a7b7a0a7f0a45"
        }
      ],
      "purl": "pkg:npm/esprima-harmony-jscs@1.1.0-regex-token-fix",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima-harmony-jscs/-/esprima-harmony-jscs-1.1.0-regex-token-fix.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-harmony-jscs@1.1.0-regex-token-fix",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima-harmony-jscs/-/esprima-harmony-jscs-1.1.0-regex-token-fix.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-jscs/node_modules/jscs/node_modules/.bin/esparse, /app/node_modules/grunt-jscs/node_modules/jscs/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30da45e25c095c6aecc3a6670d664a0c0b54aa325747d42616c843b1b5b32e299dcd546ec53ddd5b13d79cf6114979e7710b08193c9918d3c3290f11f1d35872"
        }
      ],
      "purl": "pkg:npm/supports-color@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-jscs/node_modules/jscs/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:bin",
          "value": "supports-color"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vow",
      "version": "0.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1e2d8377645c079a095aee782914d85eb58c0e371ea877181bc103c0197bcfe5a3ac02c8e34a31e64d0174a009ef991d69b159ab3cd88ef7739091db1910b15a"
        }
      ],
      "purl": "pkg:npm/vow@0.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vow/-/vow-0.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vow@0.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vow/-/vow-0.4.9.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.20 used instead of 0.4.9"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vow-fs",
      "version": "0.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "362f7823b15e44546f79675b7e4086a8bd4a83cd31b9519cd7b45fd587dc8d0862bba6fc7e2baceb4844707e00a9d2fccc1f15080c84a17fbef5626e9175024e"
        }
      ],
      "purl": "pkg:npm/vow-fs@0.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vow-fs/-/vow-fs-0.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vow-fs@0.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vow-fs/-/vow-fs-0.3.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.6 used instead of 0.3.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vow-queue",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c17b4367b12b476864fcb29bc1c6ccb089e01a5454c8f13c4b75eda5ec2ea958da8aa240062a5e034442f5a7c8fa732231e109b7d10196f37aa985defe4a36b"
        }
      ],
      "purl": "pkg:npm/vow-queue@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vow-queue/-/vow-queue-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vow-queue@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vow-queue/-/vow-queue-0.4.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.3 used instead of 0.4.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "2.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e5ceb1b39ab7b8ec8b6d069c1b450316621b98e3041b0f1726327368b0f4c7aff45deff04806f96fcaf0da9c6f6fad80100e25fc0a6328f97a6619fb2818126"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@2.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-2.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@2.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-2.4.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "lodash-node",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a012df1e350a769195919a781a862a8ca0308308436fdee335f3c4bb11de6de24defe91acb10b5c2f85a8b34c527842a3b82f417dc6d55f28a4afcb72c95a86"
        }
      ],
      "purl": "pkg:npm/lodash-node@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-node/-/lodash-node-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-node@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-node/-/lodash-node-2.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is discontinued. Use lodash@^4.0.0."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-merge-conflict",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "342128993ffe8789b18d8a325fbe427c7a21c61d83c8336738db8abe3e4e4a86c664fe1a8a1a6afa4702a3ac05a5380b3352226e1873d1f47b02820af0e24170"
        }
      ],
      "purl": "pkg:npm/grunt-merge-conflict@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-merge-conflict/-/grunt-merge-conflict-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-merge-conflict@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-merge-conflict/-/grunt-merge-conflict-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "grunt-shell",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80f612fb55b3193f4ae40e2b140cfa238d50f03af7760b78eb880dc0b820c143f96e5da7ccd8a96e7d50962377fe016b06679df41750a5e14a292d7e35377f80"
        }
      ],
      "purl": "pkg:npm/grunt-shell@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/grunt-shell/-/grunt-shell-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/grunt-shell@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/grunt-shell/-/grunt-shell-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5313786900381ae625a29e5702a72842edf4e5f6e42e98b0fc8b68c9a0979583b51bbde6398e3ec5eae0aaf30d2142949e2e168f9f94057bc7b9eada0c54fd4"
        }
      ],
      "purl": "pkg:npm/chalk@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.3 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d338ec5cc8674e26d1c7c62b2e02ca6f936f58470737f39911ed4dcd1f1556b10ceb1afbfcdc8bb283157a50216a82613ada6e7b169e4460fc305f19eb8fbd2d"
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.2.1 used instead of 2.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f02f321e7368688ff2d6f45de709c4291306797c32752ce73a48081cd29cfbf421a263dce66612246dfece9cafad0b7e948694016b4dc73edd7741abc6a05e9"
        }
      ],
      "purl": "pkg:npm/has-ansi@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-1.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-shell/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:bin",
          "value": "has-ansi"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.0 used instead of 1.0.3"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/has-ansi"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jshint-stylish/node_modules/chalk/node_modules/.bin/has-ansi"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "179690332c302769fce6ce2124f4d3f513f11a6b9ba27b81d7430d628d7bff1a61d7be27d8c211df71d182e87355a835d0efe7a4ced23e4ef72cc64d3fe15a5b"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3876cc92c70715170d584716f347d8842af302385e48807024286915a06a03acc4cf9de7c6e9aa8baba472245bfd4034fefda70cd324dbc71efee05b6110ec9e"
        }
      ],
      "purl": "pkg:npm/supports-color@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-1.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/grunt-shell/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:bin",
          "value": "supports-color"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.0 used instead of 1.3.1"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-util/node_modules/chalk/node_modules/.bin/supports-color"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/jshint-stylish/node_modules/chalk/node_modules/.bin/supports-color"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp",
      "version": "3.8.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "106dd2bef8fd0bc438ac4f545d6f640f336b3087fd84111de4a0bc39aca1d721b9b86591c51d56801df53c0c0be96753eab9e2b6dce849a3af82d953466fe3cd"
        }
      ],
      "purl": "pkg:npm/gulp@3.8.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp/-/gulp-3.8.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp@3.8.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp/-/gulp-3.8.11.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/gulp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "gulp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e0fbd4700a0ff4a77dad78a74630f4cf9d55ca0f4c370df1e71537e2728cec020b2fab65de9cf26afcc629cf343fbfcceb3b2267e83b37f550382480f015fab"
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archy/-/archy-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deprecated",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "051002b5ce81d6625ed89da6aee1c5a875abb4bcb4429a6effb2ca76a587de8ffd8f52ffd6984f51a415fb64b71fc6435b493a87e34438a7070434629162e238"
        }
      ],
      "purl": "pkg:npm/deprecated@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deprecated@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deprecated/-/deprecated-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-util",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf3cd5f1bcc05e2cbb3a28d640ed7ba8be530cae74aaebcdcdf875743515a7e7e577472661adb85ab2bcddaeb6fc30b7423addc8de8790144c8859beeada91fa"
        }
      ],
      "purl": "pkg:npm/gulp-util@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-util@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-util/-/gulp-util-3.0.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.8 used instead of 3.0.4"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2de658f83643467bcfede32e43a2c77c2cd41b100021589406588adb83f78565cbeb2e12a2bb6047a3629bac6b91f48b9661f4fa4fbd358370542dace7766b61"
        }
      ],
      "purl": "pkg:npm/array-differ@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1956239a92f4e5a97874d94a266e7798a138c3d38e2e2b951d6a2bb08037615cfe1eed21727e8fb44dd8765d04a94eeffbb0010b89a38d6b272d4c5ba67a3e08"
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.3 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "beeper",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2ef2ec86c0d4c2b8d39fe45bb2995ab6445c5e0ad6edb8186253d94685f8561ee6494888fa34d82fb0254c41bfcf4a1f5c861de9974566e6835ff3fbbd89d68"
        }
      ],
      "purl": "pkg:npm/beeper@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/beeper/-/beeper-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/beeper@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/beeper/-/beeper-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dateformat",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e73708f90a2e974420882723ceca1bb3d1b573ebc708d6980763466b9ed96d59cfedb65e289260a0cfcaf88fe86da1c09b210bd09f2125a7db43e1c54999f364"
        }
      ],
      "purl": "pkg:npm/dateformat@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dateformat/-/dateformat-1.0.11.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-util/node_modules/.bin/dateformat"
        },
        {
          "name": "cdx:npm:bin",
          "value": "dateformat"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.2.0 used instead of 1.0.11"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-foreach/node_modules/gulp-util/node_modules/.bin/dateformat"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.12 used instead of 1.0.11"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/gulp-util/node_modules/.bin/dateformat"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9fc67ea4c41c4146a1663888c75596061c56d15e68705ad144fa2f26739eb89ea360a016b12447a9e3cbfd01d056a3cfb2d04894c280df0cbd057b2f0a289b37"
        }
      ],
      "purl": "pkg:npm/meow@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/meow/-/meow-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/meow@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/meow/-/meow-3.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.7.0 used instead of 3.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8703582938c94e50da6e3269db19f487c6d198ea4e6ef5d58186d0991f97a1bfc47810ed61e6b7c6db63af986a896a8b5ad237ffac4eef1d59024b50f6ea7e6a"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-obj",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3c3873069aa808d4f27216ae53d431ce468c515b36fc71998968c74f527b7be2d00bcbaff203507131a899a6fd7bfe8619279eb7e76d1ccf922ca15d3a744d4"
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7625b8ecb7e86788e44345507e0de4348296fe5acc08b78c89ec08aafa978b882393031b714e9c29a3463779521e98eb5fa5ea6274ec7697ff07575a0a849f77"
        }
      ],
      "purl": "pkg:npm/indent-string@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indent-string/-/indent-string-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-util/node_modules/dateformat/node_modules/meow/node_modules/.bin/indent-string"
        },
        {
          "name": "cdx:npm:bin",
          "value": "indent-string"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-foreach/node_modules/gulp-util/node_modules/dateformat/node_modules/meow/node_modules/.bin/indent-string"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/gulp-util/node_modules/dateformat/node_modules/meow/node_modules/.bin/indent-string"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11ddab67df4f35ea9acf4e4f97008dbe3be6ab245722f0aaacbc6b678b3e257613b1c7f377e59b5650d9e54ab52ec65dee9aa62b2a6860fe86b7a8d47f0cf7e1"
        }
      ],
      "purl": "pkg:npm/repeating@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeating/-/repeating-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeating@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeating/-/repeating-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-util/node_modules/dateformat/node_modules/meow/node_modules/indent-string/node_modules/.bin/repeating"
        },
        {
          "name": "cdx:npm:bin",
          "value": "repeating"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-foreach/node_modules/gulp-util/node_modules/dateformat/node_modules/meow/node_modules/indent-string/node_modules/.bin/repeating"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/gulp-util/node_modules/dateformat/node_modules/meow/node_modules/indent-string/node_modules/.bin/repeating"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finite",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "155fb2f7ced6a64f643e711676a8c1c10c580c98af02eeb5374cff40662bb52374f908d6c2249d5882d5b958abf489637374c042f0f169370402a995318ea90d"
        }
      ],
      "purl": "pkg:npm/is-finite@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reescape",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a395abe6e72f85515205def17707be46c97af3b1f615f0396fdcbe26129b81f657a0f0deb27ffeeb534ea22cfc7d7d8d0cbf7921569f69ec3c7498657a57939"
        }
      ],
      "purl": "pkg:npm/lodash._reescape@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reescape@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reescape/-/lodash._reescape-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reevaluate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ab3f074373ae6226205e51ee67fcb22377b562cbdf5b2b00dd93b6799637d9834b8544595f41a0b2f6d67860c01a83d580666955a5ed6266b90830c48c1c3df"
        }
      ],
      "purl": "pkg:npm/lodash._reevaluate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reevaluate/-/lodash._reevaluate-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reinterpolate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c581edebc411a181a379e33f5ce135b89b6f5d0020beccdf0618d5e32bec407d2eda2f48e9c23a73afde1b81e1dd400e567d32ff1017c264f311acb8f50fff1c"
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.template",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd5b8d2a483be69e4ec56f52076feb242c16b212bd634ef5bad62be4832a87fc80bb82d57e0a043b3b4e290d05ed0d099d7fc9ba79e227938b9e2193c61e1bc9"
        }
      ],
      "purl": "pkg:npm/lodash.template@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.template@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.template/-/lodash.template-3.4.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.6.2 used instead of 3.4.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is deprecated. Use https://socket.dev/npm/package/eta instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecopy",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a80c0925712c74021cc433b97708b3b65625fda4a6bb2cab721a273863864e56513d30b1c05bf239c837f149a949219eb441c65b4c4f96fc887290089882359"
        }
      ],
      "purl": "pkg:npm/lodash._basecopy@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecopy@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.1 used instead of 3.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basetostring",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93e6a8e740bf8d8a329ce9ee027184380f0b088e5e955d2b60ad6c4098f9eb3fc8ccbb5d45a8e3cc07c524f142ef096021be90b8ca63f2fb2b55b87012d7f3e3"
        }
      ],
      "purl": "pkg:npm/lodash._basetostring@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basetostring@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basetostring/-/lodash._basetostring-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.1 used instead of 3.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basevalues",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fde309793f5dee12a94283b39c34d84c43c2af592232a97cce3eeb118070bd0cade8e783fa3f7c6d6d79556d10011b8ab98129a9ec40dd274312b96f475fa32"
        }
      ],
      "purl": "pkg:npm/lodash._basevalues@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basevalues@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basevalues/-/lodash._basevalues-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._isiterateecall",
      "version": "3.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ea0913d83e7e71191119bcb5d3596e5bb56167814d54cb72286b6cc886099a80c5926db60918d7d2f3a0e75c40be4d9e27534b7946c45ced49e91e1f363799f"
        }
      ],
      "purl": "pkg:npm/lodash._isiterateecall@3.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._isiterateecall@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.9 used instead of 3.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.escape",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b0b1c7c8b32770042d98f1f2faf8b53eb568765004f5483b0a0ca04524c379e32eab7105da3f107a23e55ea7e771265756daf2a495408acce3e5f208ebf7d3f"
        }
      ],
      "purl": "pkg:npm/lodash.escape@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.escape@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.2.0 used instead of 3.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "3.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ba65c13654120611ef557e6a12a8e8a050d974dc7c94691e75d1d10f50c55d0c9766ace2d507b0ce99be875950267806cd7e7135da1b380f222bc3d6d691e324"
        }
      ],
      "purl": "pkg:npm/lodash.keys@3.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.0.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.2 used instead of 3.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isarguments",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4582a8204f3bbd33cc2168c974b83913a9d9f4b20d39fa0589983b98602411501324be98a637e08f814af5ed1231f25bc8e344eb8176152230f1b2475204f015"
        }
      ],
      "purl": "pkg:npm/lodash.isarguments@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarguments@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.0 used instead of 3.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isarray",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "237653eacda5f6b8c59f7f0dd892232b7fe8f943ed5168a64ba0a512788dda7562f2b53200a88329ecb8f772661a22b3f85516570c195dcc873cc206f58192e0"
        }
      ],
      "purl": "pkg:npm/lodash.isarray@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarray@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.4 used instead of 3.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isnative",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bdb1036d998967e0b4441123e624d4054e212b3f1fe6451c6d9e71e0406cad4f005c4656122d313d74fd3dd5a4b55093e76d564189c5449258f5d4162ef496c"
        }
      ],
      "purl": "pkg:npm/lodash.isnative@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isnative/-/lodash.isnative-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isnative@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isnative/-/lodash.isnative-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "lodash.restparam",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db1cc7c4d140efb536d3f28e7ae5eb1cbc733a301ca332a43847bbfd3c70560c33a9c12c008933b3fd6b6f95e554c1c12adc8a278f0e95a02fed6fb8a856bb3b"
        }
      ],
      "purl": "pkg:npm/lodash.restparam@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.restparam@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.6.1 used instead of 3.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.templatesettings",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d62ca2c2c2dae9ac9d03eeaf20055a6bd31855b36a56ae036b6ab236ceba2a769215b123577f7ef33686cfb363926d7780edb5968d55519b3593cd0787ab46a7"
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.templatesettings@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-3.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.1 used instead of 3.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multipipe",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed9c6b5326d8bfd3689e85e0c283aab52b48bb5f03d5cdde1598f6ee1aa07f9901ac117c43eb44f15d0c5bc74a33940b9103e1d498616ca8072d8f6489fa2fe1"
        }
      ],
      "purl": "pkg:npm/multipipe@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multipipe@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multipipe/-/multipipe-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "replace-ext",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "005056072f445514dafcb844706f100cfdc5be9c19aa6bcdd90143b89b3015e6958569d9329f2adc4e9977dd12474e0f948c1f19dc958cdc8b3f27a7fde93909"
        }
      ],
      "purl": "pkg:npm/replace-ext@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/replace-ext@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "0.6.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e945c8b0ed1f4d360c831790f698ac30e22a17fb8be846ef6bee07c6286d2cb47682c71612ef8e4ccc1aaffd1361969e0d2352d66b082405c9462b3e1a88cbf2"
        }
      ],
      "purl": "pkg:npm/through2@0.6.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-0.6.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-0.6.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.5 used instead of 0.6.3"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.6.5 used instead of 0.6.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a66cdae0ce55035e473889884185a1a171a518d69f0a6d102b90690545e4cf3130ad1c4aa81b1b0214df913db331c261517d46d46922774c5a57c5a33a5ec3b0"
        }
      ],
      "purl": "pkg:npm/vinyl@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.3 used instead of 0.4.6"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 0.4.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83ada7dca6fd72ccde66f9af054a8ffddb04243ffef34a4303cbbc2aa1e700fad59d0d897bdad557aa29c6486e5827759029f680e89bcc32b10ad06f0f7ab990"
        }
      ],
      "purl": "pkg:npm/clone@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.4 used instead of 0.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone-stats",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76152a739ee048c0a8e935fce452df7b9d5e0bfb3e226d8c2e40202707da4517b1476b40e1d77778b116e0be9e7f31dcda2368aeb4515c84e27e70cb951ae168"
        }
      ],
      "purl": "pkg:npm/clone-stats@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone-stats@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "0.3.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c1f37ff483bbf445c469b64a24451e9b6a278f38c6e3d0227102c0e56edc9b88b3f032af239414a6bd04e9f913916e54bb87d5205c851ddcb2fa694ec3c2ac5"
        }
      ],
      "purl": "pkg:npm/interpret@0.3.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-0.3.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@0.3.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-0.3.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "liftoff",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b8356cf49251399c518654a5dda22936536bd4b70732b9ab5b9c4af40895db98ec57d324ba3bee6d9291fd4ef4b56cc7567b48cc8a18b469c71c36a426dbc04"
        }
      ],
      "purl": "pkg:npm/liftoff@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/liftoff/-/liftoff-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/liftoff@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/liftoff/-/liftoff-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.5.0 used instead of 2.0.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a30ddd2dbe4dd9de13f62b139ed75ebbe0d18b1419d633147dcdf4dbddabcab83a721ffd2cfdf93d1dfabaf56ddbe5eaed1be94d58c5c3d47fb71860419eec22"
        }
      ],
      "purl": "pkg:npm/extend@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extend/-/extend-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extend@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.2 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "findup-sync",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "baff1ad1ecec8c04fdf7391226c26dc75b1cc9e7ba8d2da20b84f9d27e8c700b9da590f9ac7b06b1dbe03be91def7852877bff6625bff1d0df2dbda9f72c69b7"
        }
      ],
      "purl": "pkg:npm/findup-sync@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findup-sync@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/findup-sync/-/findup-sync-0.2.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.0 used instead of 0.2.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90eab59dc53252f919765ec180a6b79facc03a2374e69ce578ec444ae73c6c5a17291858b2b64ceb3efd3b90ca7bd2460a11e149996852c0ff859ad45c1cb181"
        }
      ],
      "purl": "pkg:npm/glob@4.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-4.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-4.3.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flagged-respawn",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99080f1cbaf2f36b1f14781c099bb7da37730a6d21d0b8b489fdbf1208330b02a5b641085e55e3ed8d07ab8208fd4c506de0d687b27d3a051bd392b65830d316"
        }
      ],
      "purl": "pkg:npm/flagged-respawn@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flagged-respawn@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flagged-respawn/-/flagged-respawn-0.3.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 0.3.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "orchestrator",
      "version": "0.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40d4d86a78661235445d1bed585c70f2f4fa59e5abfb471c7efbb4d5bffb6933afffb00d0cecf40d6d89505be210acf48326b5347ded1b9736f7faec01df8da9"
        }
      ],
      "purl": "pkg:npm/orchestrator@0.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/orchestrator@0.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/orchestrator/-/orchestrator-0.3.7.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.8 used instead of 0.3.7"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "828e534247746115d8857f8b73752b5e4a0a5398fe9bbda310fe651d6af6361f362fcc1f66d1fcb682a0720e13d74a36dc42c83065d077009b97ea805c83c3af"
        }
      ],
      "purl": "pkg:npm/end-of-stream@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sequencify",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60bf013e6d2da7a4a55de7ff56a62903f8a3993b033f66445f3b27aa391a592ecd3fb05fbf0d7c35ba0bd0ef160888f2ebbb0e086dcc6122b53c1e060bd5ddb5"
        }
      ],
      "purl": "pkg:npm/sequencify@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sequencify@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sequencify/-/sequencify-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-consume",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7299fa928b3fc9e36de57e3d606b2079533c49b10d09de275d7652d842faadacc2fdc77eeaa6e0b980eb2a45e4475dc0f45dbfae1b545bcd8ca31634ab5ceaf"
        }
      ],
      "purl": "pkg:npm/stream-consume@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-consume@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-consume/-/stream-consume-0.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.1 used instead of 0.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-hrtime",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd5a3d5a955ff9138e9bdd47c2bb4452f7c2fd163a3a7c27cfea22344cc064fd313a95196fc64e28cc35f9b292e7b43fd4318078d6a7e696de0a969490fba9ac"
        }
      ],
      "purl": "pkg:npm/pretty-hrtime@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-hrtime@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-hrtime/-/pretty-hrtime-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.3",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d746dd38e741c5854aa3c5d39c87109f6a342c4bd3635c47be371a2b24dc875de7f6b7d9666eeab68033c5b39d74ecb118ad4d9164383dcc6cdc3237a783417"
        }
      ],
      "purl": "pkg:npm/semver@4.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.3.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.3.6 used instead of 4.3.3"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 10
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 8
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tildify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dd3bb4133519a4c78647152b6a340f281858ae940b200e3646d42c688689ef9cef680a2fe9dd00af15442a8cfe65849539aed79c4bdb8e4cc90d26b0227b5820"
        }
      ],
      "purl": "pkg:npm/tildify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tildify/-/tildify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tildify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tildify/-/tildify-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8flags",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9aae97d68736e7814760001240c8c295a942a7c0a39aced79ea379a8da099237e9443ff7b35321de3302521e0c34bcb235ab033dade466b68a0ad53808cfed2"
        }
      ],
      "purl": "pkg:npm/v8flags@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8flags/-/v8flags-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8flags@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8flags/-/v8flags-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.1 used instead of 2.0.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-fs",
      "version": "0.3.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a097a6c7592eaf68186e61d8b69ba928ff4fd5bdd623f5946f04efc087c8d44ff4c2adc07595e954395bb2b0414142c30dd3a6765e9f5ccf3b6e235234f1d2d0"
        }
      ],
      "purl": "pkg:npm/vinyl-fs@0.3.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-fs@0.3.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-0.3.13.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.14 used instead of 0.3.13"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defaults",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "248ebb01869d647abd9b4aee47cbd4ec2fed7d529ded6f9774242979122cf84fb5b59060cc9fe7bd72d5e4ebcb88780494e7aa85b4a504646ce94a7fd615c7aa"
        }
      ],
      "purl": "pkg:npm/defaults@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defaults@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defaults/-/defaults-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.4 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "0.1.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20eefc234cba25c4a910f1f32b8a1b29db0bec4ee82dd4550d538bc2bd8791b8ec6fe128cf47715bab5e7f45a2ce82aed202c2e2865266e105e14d8aeb0d5643"
        }
      ],
      "purl": "pkg:npm/clone@0.1.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-0.1.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@0.1.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-0.1.19.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.4 used instead of 0.1.19"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-stream",
      "version": "3.1.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a301ed94c3172006f12e385400ed07856d7f4c1ee45740300ddb88dc12db62c582691ccd21c2c1bbc374c0765fb7665ad920a651708439da59cc2ee4fc7d7d7a"
        }
      ],
      "purl": "pkg:npm/glob-stream@3.1.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-stream@3.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-stream/-/glob-stream-3.1.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob2base",
      "version": "0.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672aa5828c0c6df8f634f8f169967f12db1794e721dbc1515e031deb8bea6569356d3f7ec2f4912d80f5a26f4ced07d0aeee75cc93c04f5eea5e6e3fcddfbd40"
        }
      ],
      "purl": "pkg:npm/glob2base@0.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob2base@0.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob2base/-/glob2base-0.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-index",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b89e6f5ab7c128c704eb2d99f3cdf87701198fd98d1b161adeddc8e773b015eb99f03f68736139cdcb2b92e857ea1e2262b8e18afd13deccd09b194057dbb10e"
        }
      ],
      "purl": "pkg:npm/find-index@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-index@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-index/-/find-index-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ordered-read-streams",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3cc5f97a188dae2e3e96093d7e5d3dc6e3de7221a6c8fc95512070c0f4f80bfdc41c6c6855fed476028313748b043e295039a5ceb8352f570ae6282ba7e4f2bb"
        }
      ],
      "purl": "pkg:npm/ordered-read-streams@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ordered-read-streams@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unique-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2fc28ce93769b28064e932535debdb9a9b9bddb0134b4e999eedc171f54f550905b6787530578267780528241c8e2edfed86228a0b0ee4e47df6faa1a0d4fc9d"
        }
      ],
      "purl": "pkg:npm/unique-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unique-stream/-/unique-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-watcher",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "973616ab50492c19ad6fdaf34fafa581b165116e9273b07e42cdd19ac340f656dd152a8b1e179b7f2a4f4779db10e31e110c9ac155ea4831f46aa8ed22695da3"
        }
      ],
      "purl": "pkg:npm/glob-watcher@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-watcher@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-watcher/-/glob-watcher-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gaze",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d182c1cfc92b0911994339f0019c5c531da6ca1b317574bace4b9e8ac4d52f96f740e2a718f381af70773daf867c47edc921641ae64b5dd6a4f439db00c1bb4b"
        }
      ],
      "purl": "pkg:npm/gaze@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gaze/-/gaze-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gaze@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gaze/-/gaze-0.5.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.5.2 used instead of 0.5.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globule",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dde21c0363a33c29b856fc08c193f3231095b2c03c1d2a4cd82e9cea42b9b9f247e051b05a8caa2f7227d7dbae5f8a1ef93c07df0d8fd67403996e7a89e84ee0"
        }
      ],
      "purl": "pkg:npm/globule@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globule@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d154840d579cfcc7b67804eea2241df088f204c317d1f6a1a1bf1827de95d60a36463bc29359b51b19ad7d79fc44d49a2da4eda29edfb2e861bbda0b93785480"
        }
      ],
      "purl": "pkg:npm/lodash@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 9
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 10
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 7
          },
          {
            "location": "scripts/npm/clean-shrinkwrap.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9501e0088db94a0e9ffc09dd2d25dc697b722afc7a2823b127f7c6a511a31bcf859e765adc8f7588ef6743412af38915b9210d33781a37257b264bc45c4bd8e"
        }
      ],
      "purl": "pkg:npm/strip-bom@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp/node_modules/vinyl-fs/node_modules/.bin/strip-bom"
        },
        {
          "name": "cdx:npm:bin",
          "value": "strip-bom"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-sourcemaps/node_modules/.bin/strip-bom"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "first-chunk-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02b462e5ac6ebfaea012cca5dd4b8af340b35bbb79ea17a6ef7606358c4d59318d28525469d49bf46bbd4878a3604522f2e95031fd5b2689983704823c786d4d"
        }
      ],
      "purl": "pkg:npm/first-chunk-stream@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/first-chunk-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/first-chunk-stream/-/first-chunk-stream-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2fbcef302c5f2a87e72859232e34d060918b3fa666a6ff2373f844ac8e60a3a592fab46260a77b9545dd1d6ef96ab0b0d128f2fa1f6c192d2ca5de32f6ada5fb"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.1 used instead of 0.2.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-concat",
      "version": "2.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70eb4610a2fa8313e0af8c7f4bdecb908f36b8f4c685b24af2196d912e6abd64c376af1665f43d44c6f2bce9df6fb54e99c350608badcd713a9e3baa7ab4ef8a"
        }
      ],
      "purl": "pkg:npm/gulp-concat@2.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-concat/-/gulp-concat-2.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-concat@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-concat/-/gulp-concat-2.5.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.6.1 used instead of 2.5.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-with-sourcemaps",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "623c51587e7095e80794553576b2ea25d7cf5d226bb1617a703aa7220b73515c8b663d17c54ada1507056d2881431e808d10bb5c4b7c1e640861b33f36111eb6"
        }
      ],
      "purl": "pkg:npm/concat-with-sourcemaps@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-with-sourcemaps/-/concat-with-sourcemaps-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-with-sourcemaps@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-with-sourcemaps/-/concat-with-sourcemaps-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.0 used instead of 1.0.2"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "important fix in v1.0.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80f6324c8f42e6fcd4c9abe8db7a2d35f7a45f169233bbd496990f6b29a70f798cb6bbdbf611caedfba472dd86b8c6e8c661e37a8789d097a5999715e837003f"
        }
      ],
      "purl": "pkg:npm/source-map@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.4.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.6.1 used instead of 0.4.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-foreach",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3f3ba61a828c66f2ff139e664ff5cc5d0c6e0df0fc9f508c9bcde70b887c1e41553780b7c68bc8c298f81a3285afc3eeab68bea307d2c0e69539f0eb115f281c"
        }
      ],
      "purl": "pkg:npm/gulp-foreach@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-foreach/-/gulp-foreach-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-foreach@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-foreach/-/gulp-foreach-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Either use gulp-tap or gulp-flatmap, depending on your needs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-util",
      "version": "2.2.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6bb6fe2c8fd12d0966060f5e47410bd6b5106d53d835b74fb0dbdb6985eb47c63c4402e04a4099211aabe52e41c4b548c4828a88a6c5703ca535c8c6406bec0"
        }
      ],
      "purl": "pkg:npm/gulp-util@2.2.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-util/-/gulp-util-2.2.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-util@2.2.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-util/-/gulp-util-2.2.20.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reinterpolate",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40610e3a3262ed6f4b2200c031582d1816fc420a3c89e0e548e0a8663b46e3964d46f0c9663c153136257d321674d454891d48f418c8a90dd969fd7e0d833de2"
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reinterpolate@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.template",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e722ce430952ebdc5b69ecf783d740d62d063008fca4b0c7a7c96103857b335bd16a6d65a83efa7f48e0e4457eeb97eb6eaad7a35587f597ca6a57d8073279c9"
        }
      ],
      "purl": "pkg:npm/lodash.template@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.template@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.template/-/lodash.template-2.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is deprecated. Use https://socket.dev/npm/package/eta instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._escapestringchar",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "899e8eb388a2a5a138de9afd48192cf94a598008c98110be9467fba2712807232bd7e35a82bd5f991ef308ce90e1118c07f5776b9eeb6843745d997b52e6f7fe"
        }
      ],
      "purl": "pkg:npm/lodash._escapestringchar@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._escapestringchar/-/lodash._escapestringchar-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._escapestringchar@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._escapestringchar/-/lodash._escapestringchar-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.defaults",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e704c83d6c061abd3b245cac01907cfbb241d8d8c92970c8c288126915f9cc40fce73c94010c2d3aa524f00b099248a051c2f76a46c7617779f813ed4c640f67"
        }
      ],
      "purl": "pkg:npm/lodash.defaults@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.keys",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "669261c2f5171d234be7061dd5133a0946b666eaa8ac6f6782827d231e4271efae5fb2393bf134e85089761499df76f9755c9e4039c89561fb076b39b81c99ee"
        }
      ],
      "purl": "pkg:npm/lodash.keys@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.keys@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._shimkeys",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "941ae0958c4b0ffe8a009f0811ae4b83e60780d00bec5c8aa978385ce508f83bbfbed9e22ecd59a92fb21cd28f90ae78c1a02091d5270ce61a59ffabbf807e00"
        }
      ],
      "purl": "pkg:npm/lodash._shimkeys@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._shimkeys/-/lodash._shimkeys-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._shimkeys@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._shimkeys/-/lodash._shimkeys-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.escape",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e2112b72bd9f20cf7eea044f87a8c13561cfdec1bff9f4030ebbca46ed9b5a9e2f3a7e83d3c60cdc910bcc7698665cf63a5797f6d04c7f09a341a871b8ff271"
        }
      ],
      "purl": "pkg:npm/lodash.escape@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.escape@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.escape/-/lodash.escape-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._escapehtmlchar",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7879b6b762e0e3bea5ab9bf81559a6dc1e6609a4650f24c4f1f9cc7cf084ab6a38e86e1abb4a8d5c82a1ed85a18e9ae6d7381230b70c4acd571cc824c34d8f6d"
        }
      ],
      "purl": "pkg:npm/lodash._escapehtmlchar@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._escapehtmlchar/-/lodash._escapehtmlchar-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._escapehtmlchar@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._escapehtmlchar/-/lodash._escapehtmlchar-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._htmlescapes",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "83bf6136630e055c95fb8a0a20733b316cbd030b64df2a9fd13c256b0afa7fe0a61b8e274f0061f48e5788b527937f4a4df6280c1a52eba8254068100a7148b8"
        }
      ],
      "purl": "pkg:npm/lodash._htmlescapes@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._htmlescapes/-/lodash._htmlescapes-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._htmlescapes@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._htmlescapes/-/lodash._htmlescapes-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reunescapedhtml",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "09f999454d4c93813fe6387e5aef2573bb6e737564bb059961522074f0c7f4d4521e088be0eaf7000e09088a60ae45731ce33e8cabb638c90056ababba14470d"
        }
      ],
      "purl": "pkg:npm/lodash._reunescapedhtml@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reunescapedhtml/-/lodash._reunescapedhtml-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reunescapedhtml@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reunescapedhtml/-/lodash._reunescapedhtml-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.templatesettings",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd8dd043b1b16de2def177d3be86036da3073b98b24c3252d4a219af1a74d0f44c9b204aafcc8470e6c74a5da9a584f077c320a8f5c06ab4ef2c0d78871f1f7f"
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.templatesettings@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.values",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7d0c2e6cabe3d8da31da0cba6278c59bc0b523a308973294b4107e3e3ec91ad9681aa0c32f908f46be035141563f05d6c009769377f80b7030f07d6a00f07dc3"
        }
      ],
      "purl": "pkg:npm/lodash.values@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.values/-/lodash.values-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.values@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.values/-/lodash.values-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e20164f71ade71acce4ee14a71462b1354e31d260beb7762a3bd83faad1dd661c5e751447314d3d911c5a476cde533498263d81ee56c05d86f5c43820dccad48"
        }
      ],
      "purl": "pkg:npm/vinyl@0.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl/-/vinyl-0.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl/-/vinyl-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-jshint",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1abd2d30d8b131b83dbed9b9f724df85e5ac1901a408fc4cf22539f65d56a77f10be3b01f9556c4dfc28da7075d33bdf250b421ffd50ee735be179c1a3a67b0f"
        }
      ],
      "purl": "pkg:npm/gulp-jshint@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-jshint/-/gulp-jshint-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-jshint@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-jshint/-/gulp-jshint-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jshint",
      "version": "2.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "373971e648a555bed107f55cc34d02d3fdc016a8d6384d4c16e6afde7d06d830bc97720afc1196dbde5210b819ce227f4c868058706a6f0f7ef62dc63f8c3a75"
        }
      ],
      "purl": "pkg:npm/jshint@2.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jshint/-/jshint-2.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jshint@2.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jshint/-/jshint-2.4.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/.bin/jshint"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jshint"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli",
      "version": "0.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75b9f91f2789592394e7c470384885d555ab97b1d1bc3b0a2e9bb4ba223fbc4c47ea2368c94ce307932bdc8258e435547e76e97bdefddf1c380c5255cc2f6759"
        }
      ],
      "purl": "pkg:npm/cli@0.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli/-/cli-0.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli@0.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli/-/cli-0.4.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "5.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9485f175946ce977d826ab05297e4b61fbd4fdb6577983cdd192bbd898bf7c7356154601cb6814c976826348c288f7418b2977fe78a9bc0e3843f7a9ce98d57"
        }
      ],
      "purl": "pkg:npm/glob@5.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-5.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-5.0.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "13.0.6 used instead of 5.0.3"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-browserify",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1496a167217e74b2ab0bb8780ceab926c1c0f9fd1c2c90f74d1d7ed022b79faa61b5dad500fb1964aabe3d9466a3645848e1efbecf24361538b918926546d26c"
        }
      ],
      "purl": "pkg:npm/console-browserify@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67c8bade7eec7ae3ef45ed4f432ae39a8552b6fedb8cc6b4b24ace97f93ab674ffe56a4f36bcd62c1d4783f749c415c7fcce8a66f9b6e494065428901b15112d"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e10afa193cddb2729519d61f7ab653de76b9ce4b30cedbdfb28ca9acffe3d9b2dfd65de95136a6c18bcd565764118146e8b97edde579995934ce046bea223e48"
        }
      ],
      "purl": "pkg:npm/domhandler@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65e6a033330aca4f4648532a577c77b87811377ea12e948e17a2c845799fb5c7b4514a85b00c7f6b324027825cfbd0d82a6c11387e472ce70ebb538f0115b036"
        }
      ],
      "purl": "pkg:npm/domutils@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c892892f5837b68edfe02ffd2f31d74f3361e79d3128679f88296cf514be0c376c0e92a99dd638f540d95b9b23ff7c9e69cdc79763f1df0e5b4fc6ccfdd32b59"
        }
      ],
      "purl": "pkg:npm/minimatch@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-0.4.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shelljs",
      "version": "0.1.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5245cb06e533009c246a5ff47989d0b3c2e95d0e20aca2f990fb40d11914ce18f592152fc3967677bd7b1914d17250d643e635e325a488cf5c257d82c121f1a7"
        }
      ],
      "purl": "pkg:npm/shelljs@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shelljs@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shelljs/-/shelljs-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-jshint/node_modules/jshint/node_modules/.bin/shjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "shjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "ImportedModules",
          "value": "shelljs"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/grunt/plugins.js",
            "line": 5
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 5
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 5
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.clone",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a158695514640e8ccb0beecbce345934cdf51ba4cba976987808b77fea01e8d36fe49e9c214b0292218733df84cd845fadf9a73ad8bf6014da07b5987d951098"
        }
      ],
      "purl": "pkg:npm/lodash.clone@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.clone/-/lodash.clone-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.clone@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.clone/-/lodash.clone-2.4.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is deprecated. Use structuredClone instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._baseclone",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb32555ecd15c42fc0bbeffb7e888acf0f14696bdf49f3e1db45e1a8affa1c542251e7252f97f3d39cd8ec6f720c0148b4028a670078720a731afc62c2e1b5c1"
        }
      ],
      "purl": "pkg:npm/lodash._baseclone@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._baseclone/-/lodash._baseclone-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._baseclone@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._baseclone/-/lodash._baseclone-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._getarray",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "888ad27306376ad1af2d56d02fff82354ce768fc01260efc4bf24ee1c4d415746446c66010186c701dbb715a13e2db08394c85bbfe4cff4ba67c734627ac18c2"
        }
      ],
      "purl": "pkg:npm/lodash._getarray@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._getarray/-/lodash._getarray-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._getarray@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._getarray/-/lodash._getarray-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._arraypool",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b42d9a2c2edb6e40d728dae30eef4e2e2571f69148be38a7203d9e0fd3f335d01019949c59477f87c7daa8ec3977aa0bb0ebc544245bcf5012a01f9d7b231553"
        }
      ],
      "purl": "pkg:npm/lodash._arraypool@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._arraypool/-/lodash._arraypool-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._arraypool@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._arraypool/-/lodash._arraypool-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._releasearray",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c300b0597f0f2bf9984795598dc53924597aa72feaadf2c6331ce928e7d2aa00353da67a67adb90992c2c47d4ab2acb14a438598d9be984623783a5794ce21ae"
        }
      ],
      "purl": "pkg:npm/lodash._releasearray@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._releasearray/-/lodash._releasearray-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._releasearray@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._releasearray/-/lodash._releasearray-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._maxpoolsize",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4a0de9b5071a087dc0ad6891e8b63b727dd22f64ef6aac5fa6bf71b5fa781099a237309b77426e3a8bd1cb93f09bcc005b6af52baf5fc4a26413f0ac6db2b60"
        }
      ],
      "purl": "pkg:npm/lodash._maxpoolsize@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._maxpoolsize/-/lodash._maxpoolsize-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._maxpoolsize@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._maxpoolsize/-/lodash._maxpoolsize-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._slice",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa874f25ae0f13652062742026090bb34503d37414efc4768af86b1671bd19db58399744e8e6f13a3eca89411496a38e81ab454fe66a4b2a458c349db938a02a"
        }
      ],
      "purl": "pkg:npm/lodash._slice@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._slice/-/lodash._slice-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._slice@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._slice/-/lodash._slice-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.assign",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02a438009cf96ee4b1f442d75ade5d38dc09c953dde0d4c00cc2a1a156160ae823a157f5ef6fcba6f561c264899f883cfc37344bc8714def2bb790e86f75fd29"
        }
      ],
      "purl": "pkg:npm/lodash.assign@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.assign/-/lodash.assign-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.assign@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.assign/-/lodash.assign-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecreatecallback",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48b733860f3ad1f196ec02a561cb8e16cb43b49b9085a00d949e18fe3acea11c61995b4ae35bdb2431f739e7d5452464482428e0723cd90564015b2819ae604b"
        }
      ],
      "purl": "pkg:npm/lodash._basecreatecallback@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecreatecallback/-/lodash._basecreatecallback-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecreatecallback@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecreatecallback/-/lodash._basecreatecallback-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._setbinddata",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "571d172b3a60d8315b430e30ae9d71496776b1f9775bf046e9bb9c4916667ed4b50336d645e982981403c7241336194b35e738dbc3d792eba36be54d05982ed8"
        }
      ],
      "purl": "pkg:npm/lodash._setbinddata@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._setbinddata/-/lodash._setbinddata-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._setbinddata@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._setbinddata/-/lodash._setbinddata-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.noop",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8d715f7cfdb9518489cf5064049e3f5e9175df1beabeadfa0d48566097f7817e883dc810d6f607d4bf60075ffac017bcd9465cd685bb251a16c64056650a464"
        }
      ],
      "purl": "pkg:npm/lodash.noop@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.noop/-/lodash.noop-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.noop@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.noop/-/lodash.noop-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.bind",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "867d9559867e37d6989dc45a7788ce46f94682916b9fe6b19cf21646f1718e4e8259c647e5be5a948f04ca662c1c84c8db767dc2b5bff8e46af9aceb545a4e7f"
        }
      ],
      "purl": "pkg:npm/lodash.bind@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.bind/-/lodash.bind-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.bind@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.bind/-/lodash.bind-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._createwrapper",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5309f2edd61690a6c6bb6e02d844a34d138caa84ee19c486b23756ed4266b331c84ee90f0960544ca9b2775beb8d98c9b8474270eca1a4657e587c30e7cb0bb"
        }
      ],
      "purl": "pkg:npm/lodash._createwrapper@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._createwrapper/-/lodash._createwrapper-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._createwrapper@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._createwrapper/-/lodash._createwrapper-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basebind",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5461e6e831fed548ae69f41d13f0cd32ac4e712ca146ed313bdfa33c3abbc484d19f960ea2b1ab1d54266af3155c26264e6f346114d96429ff8d35bb3289302e"
        }
      ],
      "purl": "pkg:npm/lodash._basebind@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basebind/-/lodash._basebind-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basebind@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basebind/-/lodash._basebind-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecreate",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0927716730f9b9e2ddc1c0f2e4f2af263f240a4179bfaedf5d7fe6b0af8346b7226bb5c09733739fd48f3a4ba8d5cb56f8c80c8505bf306ca3c46aebaacd199"
        }
      ],
      "purl": "pkg:npm/lodash._basecreate@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecreate@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecreate/-/lodash._basecreate-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._basecreatewrapper",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c768dad5f6bfaa6cdb8b3b978153384003fdb2fb4c6ddc631bc02797d6c27830302ce550d6f2eb03484b6ff364a5b1a2f5ebe3b649746962d31283a551d04f40"
        }
      ],
      "purl": "pkg:npm/lodash._basecreatewrapper@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._basecreatewrapper/-/lodash._basecreatewrapper-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._basecreatewrapper@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._basecreatewrapper/-/lodash._basecreatewrapper-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.identity",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "551617fbc5e2a5e2e3a2b6a0e5bcf760105127ee648fc8550737e76878173d90154d8a3005d6399743396673a694030239704569b42d9bb7f956a8cc2848e2d3"
        }
      ],
      "purl": "pkg:npm/lodash.identity@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.identity/-/lodash.identity-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.identity@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.identity/-/lodash.identity-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.support",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e92c2a5b01851e14d7122a81ff2420bbc15877ffed9bbf3a778f72ee48b31d50891fbcddcecd7dd54427dc44b7b649036d475d3517e409162a2451ed6cb9db0b"
        }
      ],
      "purl": "pkg:npm/lodash.support@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.support/-/lodash.support-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.support@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.support/-/lodash.support-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.foreach",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02f3a86c0904eea06d2221d4e501d021fbde587e54b2bf6921c148cc1bfbbb84ba6ef6f7156a45ae1f65b6a058ed478be65c3a7bc77e4a0822517415ca1f85a4"
        }
      ],
      "purl": "pkg:npm/lodash.foreach@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.foreach/-/lodash.foreach-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.foreach@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.foreach/-/lodash.foreach-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.forown",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "542f822a6ff34ace6dde2fcc1efef51d9a10a61baa3af7b3d71863581c07539cc06ec098aeac07afe332432324d781f303785244d039942a83312c391b642c72"
        }
      ],
      "purl": "pkg:npm/lodash.forown@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.forown/-/lodash.forown-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.forown@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.forown/-/lodash.forown-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.isarray",
      "version": "2.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c910ddd33f803f3883a9b93432a47a41fc23fd09f78cbc4525b23d53c32ebdd4e7a885dd679617c862e7c2ecc2a599a3af6e85d4634e8ca2cc319d748bfc32e8"
        }
      ],
      "purl": "pkg:npm/lodash.isarray@2.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-2.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isarray@2.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-2.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-rename",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "aa17d4958c2ae7320fe1ca518f1fa7a76bd9567af4c42450ac5dd1b067a5f2ea8be3b1aedf28e696549f9ef27297fdfdcd8bb14baf1ed679f12266e6ef7f3cbf"
        }
      ],
      "purl": "pkg:npm/gulp-rename@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-rename@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-rename/-/gulp-rename-1.2.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.0 used instead of 1.2.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-sourcemaps",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "734e7e7dd3b908cab66b88ac29fa4c98d46009583141d8ad066072d9fd5802c7ca008478f449aff1eef8f01813beee199b674ee89f1aef971f4c77f179b65b25"
        }
      ],
      "purl": "pkg:npm/gulp-sourcemaps@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-sourcemaps/-/gulp-sourcemaps-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-sourcemaps@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-sourcemaps/-/gulp-sourcemaps-1.5.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.12.1 used instead of 1.5.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "452348a7c80a01e4a8511d46f9cf24560f008edfde5315d1f9f84ca254893426dbba66f370fdcff0b3a7948aa66f52fb7ba0ec90a69c5bd2c81bf9b474d1c47c"
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.9.0 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gulp-uglify",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b11aa37a2f94ff64733d051ac0016507718c480d1c6eff431164904341a9c1033b5cddfe46202823e55166c774f27033477ec69228e30eb990061f0f1b85f7ff"
        }
      ],
      "purl": "pkg:npm/gulp-uglify@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gulp-uglify/-/gulp-uglify-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gulp-uglify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gulp-uglify/-/gulp-uglify-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.5.4 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deepmerge",
      "version": "0.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2c0f0e5fd2c20abc89befc4a0bcead7b518ba1470956c2f7aa2168d2b4b35de471fe1f607b45a386d6ac0175f50cf8335ce9191b52b7badb91a2635502be01da"
        }
      ],
      "purl": "pkg:npm/deepmerge@0.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deepmerge/-/deepmerge-0.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deepmerge@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deepmerge/-/deepmerge-0.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.4.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19a85465c17b9ac5cf6aa7e39bcfaf7aaa796052d1e0c0ea816c23d92b05811bc56c1ff0b9a64f2ed13ec34f8a9f2d53f366c4e3dab86371f5c6199e9c4574fc"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.4.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.4.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.4.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.4.16.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/gulp-uglify/node_modules/.bin/uglifyjs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uglifyjs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.6.4 used instead of 2.4.16"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vinyl-sourcemaps-apply",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5df36e34af9162feff7ebe5a2adda25bc6eb0f6aa9c88b1baff41bdcf6cf7691c8a073051ec5c650f4a823e22404e7c07ad8208f01fc5ecfbd33b2cb703ecd80"
        }
      ],
      "purl": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vinyl-sourcemaps-apply/-/vinyl-sourcemaps-apply-0.1.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.1 used instead of 0.1.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jshint-stylish",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ecafa5f1d605e598e387c9666f432da88ab722e0e8f73ffbdd857418efbda15fb45f3ca5a0a32369a76aae54fd1a8bb9b35f2cc93370bc84772c4fe5845dd6be"
        }
      ],
      "purl": "pkg:npm/jshint-stylish@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jshint-stylish/-/jshint-stylish-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jshint-stylish@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jshint-stylish/-/jshint-stylish-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log-symbols",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a63eb5b4161d9fc4ecdd05b16fe20d66ea947bda16852cf2761b94891042dfd72fa2690ac31ba71608f8f2e7844761b640b7b5fe96cebdd0ac3ad807565c1cd"
        }
      ],
      "purl": "pkg:npm/log-symbols@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log-symbols/-/log-symbols-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log-symbols@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log-symbols/-/log-symbols-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-length",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "231eda9f45b590dcc5fef7fa539cb474d049d1e15ef0e233e037200d5380297fe12e053d23bfff74c86e4bd02fc593f8a794a9e9a74febc20a51021e19edb377"
        }
      ],
      "purl": "pkg:npm/string-length@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-length/-/string-length-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-length@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-length/-/string-length-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "37ef148ac0170c693c3c55cfe07033551f676df995277cd82c05a24c8a2a0b9bf98ac8a786bfabe6e68ef3eeebdc131fb8d22e7c8b00ed176956069c0b6712a7"
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma",
      "version": "0.12.32",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57c7e79c6c43dd4400b505087c57b338aab18a4b41f92a0cbbfe367c37d54edefaa9672a5cf54b4b53208d79fd96f583b1d7f17111a6691b294051b7610081a5"
        }
      ],
      "purl": "pkg:npm/karma@0.12.32",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma/-/karma-0.12.32.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma@0.12.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma/-/karma-0.12.32.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78d353da59700847b48a189a7970c56d6a8fd7e1d5ff75caa9904904c97835f3b8dcceb900fb27b421f440d5e65bfb18e0f1984868fcf3d7fdd827bb81981e98"
        }
      ],
      "purl": "pkg:npm/fsevents@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-0.3.5.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "1.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f1e332ff2f0219e6fcc1d15392610fc911c1682e1dc34795ebdc471e804764b773fef113768d372b4beda9eb347b036dedc099070da6a34bef6573b98ca5a29"
        }
      ],
      "purl": "pkg:npm/nan@1.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-1.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@1.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-1.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect",
      "version": "2.26.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64537e6a86f5141df1f8f9f2fb0128d67f26dd69163dbc9221be790bea5cb0cf1fb3ce946f61f942b69ccdb83bcb2d1addb1a27eea253f71683fd33922cab06b"
        }
      ],
      "purl": "pkg:npm/connect@2.26.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect/-/connect-2.26.6.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect@2.26.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect/-/connect-2.26.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "connect 2.x series is deprecated"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d3796699742eabe68ec551258d4cfb717ae7738377326d41204f9e9c956896dc53a96747db4005280f693f06a990972108dac2b74c1aacf59a7aa7a16cbffb1"
        }
      ],
      "purl": "pkg:npm/body-parser@1.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.8.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "depd",
      "version": "0.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "332431f0f3a7b69eec7b2f6084f7b3601e6020a49b71c7b9a64a0774598362488e72c1397f9c8b2c1ceff1072cf4b97584f82610e7c869ee759f815aee5df3c7"
        }
      ],
      "purl": "pkg:npm/depd@0.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-0.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@0.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-0.4.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0678cda75dda6692b858119b9a368d1cdd8c0a9dcff39d27f3377f24b8a7409f0bb27ab606be28db8ebb0b6c1a32c63992bed9e3548bd6012a87c55b7f3835e4"
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df7fa0e93664a659dd97eda4d9534ed58a615f9866efd0c68413fa4c970323da35b0215b52f3b66e0c4f7466a7205a992b8b2ee8e54bc0f1d8f4690b42ba2380"
        }
      ],
      "purl": "pkg:npm/on-finished@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f850aeb77e28362243da30fe60bfe89d1c4e1c5e6eb77c4e1a04c8c8420e7587ee9fc01ec58844caeaf3bfd8b3c214dfb7567ba5dcb85654eae752bfb08b1044"
        }
      ],
      "purl": "pkg:npm/ee-first@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6d6aef429e0611fc88a6713843900b3b2f3959871a3dd9188c1ed2db3aadd1eaef620e48b1752cac68055a669601cab5d659a9ed109e1f54f974c51d8c71209"
        }
      ],
      "purl": "pkg:npm/qs@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-2.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8ae2356ce4a2f6d126542ad7ab4d99cac5dab53ae102ef9f4a8ed73901e1328e20f3b752cbd601d96ffd51dc21cf46cfa4593851ca0b863ac78293db443de4b4"
        }
      ],
      "purl": "pkg:npm/raw-body@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "No longer maintained. Please upgrade to a stable version."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1febc574a149951f8b6119cd5c2d1dec29d2023ec68bee4ce961cec55f5a5c6a063878896587232a41ca0eab6f3d7fec63da8ae6f283d6c2c0b0c620a05496d"
        }
      ],
      "purl": "pkg:npm/type-is@1.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.5.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d4d2988f5be6636d28c68dc0708649d083c9faabfcd32c7fbf49f40dc3bcfb0d4c081393cc6be1944281e8689da65b51e2952a2e1aa6bc79380ac755cc20ea4"
        }
      ],
      "purl": "pkg:npm/compression@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0428ce9794582a4a90dcc644fdcb1093f270d25845410f452381458c096879907f5553e6abd8c8660c3606c68857ba33d4f0f3f3f3cba4a64bdf5c5556ca01f"
        }
      ],
      "purl": "pkg:npm/accepts@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ef8b919071ed93183cda9da4f1358ddb6e8c6375c7b5f2cab0372958e37f70904922248c9332118531d94f0af0ec20f6bd20a21f84ac02316110f58a5981bd5"
        }
      ],
      "purl": "pkg:npm/negotiator@0.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.4.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70f8202f3a503f220d20cef38e0ea46a61b4271cfed08e219638115121d42949d21e89cc701607be4ee2c0f446b222849f14b8beeb88061ae0cbae65e22fc4eb"
        }
      ],
      "purl": "pkg:npm/compressible@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.18 used instead of 2.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1c4547415beb9ee29269ba2231d8df6bff36aa7d35d731e0b0484973dfa60b8d6878792499dbfb1dfba9a94a3d3bb87f13059d5048c841a2ef69a6be5d010b"
        }
      ],
      "purl": "pkg:npm/debug@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.2.0 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bab9d2752b56a66d7061fcb652b636eaa3b71da070bb0e7980dbbd5ecd7b70fadf031c3776171e762b359d630f14a1324b725f59ab1b50855597aab7cbb7c655"
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-timeout",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fad47777f641d498276ee4c7ba812bb51fb2156e1e9f0c666399a2d20008b8d680b55b736ee6c6610b971d12aa5eb464cd723f4771daf299bb53264595d46fe"
        }
      ],
      "purl": "pkg:npm/connect-timeout@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.3.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-timeout@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "cookie-parser",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2b0d6ad8b586c3f62d700b1d4123bd37fd9e8b879070e3a2422a801252cddfb8c10f4f5660a114e2a5d631f963661625df0260e85d3a6144dc0b87226ca951d0"
        }
      ],
      "purl": "pkg:npm/cookie-parser@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-parser@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.3.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.5 used instead of 1.3.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "626d395c52950fe10e078dd0537a2f23f2afa85a3930fe011ac1fe4a400c9f699d8cb8f65b86ce4b236cc35224d6023b0b20ed47d01ed935051dec606a212e66"
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csurf",
      "version": "1.6.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7433baea145feeef27b20149550fc7a4e391ed6a2ab4b96c4e8133a7e93ef668cdb2c4821563cdfe501c60fe2fb5fbbd2ab003c58ef6ef3acf56bbaa5fd94db9"
        }
      ],
      "purl": "pkg:npm/csurf@1.6.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csurf/-/csurf-1.6.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csurf@1.6.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csurf/-/csurf-1.6.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csrf",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1ec1d5c6d7afae329ab81c208ffe410d95759a55938c915424cd9463990294cb82ee7d3e2d9daa5ec335f32f19d1f68305c533cfb8b7d47079b6813759399a8"
        }
      ],
      "purl": "pkg:npm/csrf@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csrf/-/csrf-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csrf@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csrf/-/csrf-2.0.6.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.0.7 used instead of 2.0.6"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-url",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57c1349758f2c9e4924bd47e27da258f1e5eab6aeacc29489eec1a3dccaebf4326dd5888ff7feb71ce2b0843bc8b8790e08d0ed050066030368b9c561c73e1ce"
        }
      ],
      "purl": "pkg:npm/base64-url@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-url/-/base64-url-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-url@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-url/-/base64-url-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.3 used instead of 1.2.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "scmp",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "802cec0452e95eb5e7abad2160557885ce1be5ade72164cab4558c62f95c5eab39807293478e3908edd06c54595bf3bef6d448553782e3afcc5dbab549eff54b"
        }
      ],
      "purl": "pkg:npm/scmp@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/scmp/-/scmp-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/scmp@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/scmp/-/scmp-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "scmp v2 uses improved core crypto comparison since Node v6.6.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "uid-safe",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "efe42d5acf738a82ff8905fad46fb887710fcabdc7fad20d229d08015e042f7daf75feea985cae5b406046a5a5ee9e6864eb0442b94bd1b63b9b90fcb69edbd7"
        }
      ],
      "purl": "pkg:npm/uid-safe@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid-safe/-/uid-safe-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid-safe@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-safe/-/uid-safe-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-or-bluebird",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0609f914736477e94f4e3233ab535553f5594ef3ca16f85d203132623c6b28dad27125db56f355cce2b0a257b2b2e9f4fc7a0ded1f935e62bd982b44b3ce28b0"
        }
      ],
      "purl": "pkg:npm/native-or-bluebird@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-or-bluebird/-/native-or-bluebird-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-or-bluebird@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-or-bluebird/-/native-or-bluebird-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "'native-or-bluebird' is deprecated. Please use 'any-promise' instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cea9ac2713b2c6d20a89031788bdcfc88968e5dd8f5b107365602247757a2e8fed597f3f9f4c6b279248af9afe04b788de86deaa2de1a1a66434109b09c58f67"
        }
      ],
      "purl": "pkg:npm/http-errors@1.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a5512ec477521abb7c4264372ce6572e1480e8c3ff88fa8acd978ee92aaeecf346900ffd301b127d5d3f2fe6c8c64a039a3178b5970ba5c56afdf92aa07bee2a"
        }
      ],
      "purl": "pkg:npm/statuses@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.5.0 used instead of 1.2.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errorhandler",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "201ae2794135dd2425192ab6fae010e9d7bfcb195ff3a9a9b2d25aee3fa3bcef35cf081c3ce5f50b5872d8541a66b8fea75a9c5dbe6ed5752111b377a45f3dec"
        }
      ],
      "purl": "pkg:npm/errorhandler@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errorhandler@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errorhandler/-/errorhandler-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express-session",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2f33fd104eb992b510fc02a0255994c3ada4ee3e11b9b93518e11853f706c47e642e6ea73c2d44389a77759a7371d076a84358293cc96425c4d77b28f18a02c"
        }
      ],
      "purl": "pkg:npm/express-session@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express-session/-/express-session-1.8.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express-session@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express-session/-/express-session-1.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "crc",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f808ebb86d26fed000afabdc9004ff7d1948939f488d37dd3a2b16bba3fe43bf8151a0f53d80de61a40a90ed619016efe2b143b70219a6f9dbb4f0bf385fd6d7"
        }
      ],
      "purl": "pkg:npm/crc@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crc/-/crc-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crc@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crc/-/crc-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-safe",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa0468ca20b664b7e15190cbe55aca14258d8ab01efcc4d38958616774b4406c37e4aa8e15b6a065c512cd93a05d1dda6b3a4dff301825c690e78b05954e6d90"
        }
      ],
      "purl": "pkg:npm/uid-safe@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uid-safe/-/uid-safe-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uid-safe@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-safe/-/uid-safe-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mz",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c7e47b612b04c924a9579b8407e0b8ec94e6c6ff9828a36c5b75be863beaf0d6cb9fc9ed2e06171ab47946343716cd1eec2870f11a7fd5ee5ea349f92cfefa73"
        }
      ],
      "purl": "pkg:npm/mz@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mz/-/mz-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mz@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mz/-/mz-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-or-bluebird",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d121fc52e6f10df7b7f367988b099dd76ab101b8961b394666fe8290c03e0cfa2359afd8d281f8844d2546d15f1602663d0172297781f17c4f6d9cfa4efbca69"
        }
      ],
      "purl": "pkg:npm/native-or-bluebird@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-or-bluebird/-/native-or-bluebird-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-or-bluebird@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-or-bluebird/-/native-or-bluebird-1.2.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "'native-or-bluebird' is deprecated. Please use 'any-promise' instead."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "thenify",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2781bea62d4ce8949c90af2fcacc9f3ebb5f4093f31f2df38387225547f1858a86d8f68a9f882762c8787bed19f14668b97fea1854f29cd940c2b640ff8a9fb"
        }
      ],
      "purl": "pkg:npm/thenify@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thenify/-/thenify-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thenify@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thenify/-/thenify-3.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.3.1 used instead of 3.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thenify-all",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44dc501ffa88f3fb77b615c90f072cb543b8cdeaa8eb8f94cbffac355441c785e7d8e5fe399f683fe8899cd16aa6516b6b665455e28249ada85568b74f8b9598"
        }
      ],
      "purl": "pkg:npm/thenify-all@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thenify-all@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fbc576d944ecb9c24d4e2e48706cd3cdd630b444b1932109fe2a46495cdb1af6ea4a69a39cd1afaf39bff14bb516a253e9de8381792ece07de7e4136165ec79f"
        }
      ],
      "purl": "pkg:npm/finalhandler@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "method-override",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3a4f284efcbe93b264d4c48dc0cb869309e18b60577b27d6d5d7379f2efb2bbf0b5b71da0b1bd4ae991e4c07657e933a2fd99b0582c3a0069d3f6908eac650b"
        }
      ],
      "purl": "pkg:npm/method-override@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/method-override/-/method-override-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/method-override@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/method-override/-/method-override-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4e1f3c1f135e3edb009b3d168c4855572446bfd01014bbf8cfacce8f80edd793e3b0a2d607c2574a6c733fe436ef5dfdf805daa34025096be89c5b8986ee06b8"
        }
      ],
      "purl": "pkg:npm/methods@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "morgan",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43ee198b599afcd3adc4a31d0d2b37bdb27581c349a5a5f810be286643463e265da21f0441544c698bbfd3c1247a7d0bf5a220d968b5e9c78f9f1352047aa500"
        }
      ],
      "purl": "pkg:npm/morgan@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/morgan/-/morgan-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/morgan@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/morgan/-/morgan-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "basic-auth",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab3c52eff6d6fcb4a2299cdd670de2b0f8e2566cd76c92ccdc899967ad96311de8250032ab2d3de0d9dbd130366599bae7107b9eed1a71f4d0f7dcfbc300830b"
        }
      ],
      "purl": "pkg:npm/basic-auth@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/basic-auth/-/basic-auth-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/basic-auth@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/basic-auth/-/basic-auth-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multiparty",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "157e9d0ce2b30e992b6f9ffe226abe57a7660993670b4dad3038997eb80749881f423e8254f1b3395a9f6c72adfd5cb8659b2630f5e4ba5c8b7fdda50b2bd5ec"
        }
      ],
      "purl": "pkg:npm/multiparty@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multiparty/-/multiparty-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multiparty@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multiparty/-/multiparty-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "response-time",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e42f859fbf2a91d788dc62caf3145a1cba7b089bc7d5ded9fb9657f673b56b326717808f47f1a277710963db3c872b5afacb091844cee810f5d55d6d697ae28b"
        }
      ],
      "purl": "pkg:npm/response-time@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/response-time/-/response-time-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/response-time@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/response-time/-/response-time-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-favicon",
      "version": "2.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23c204056a625ba26109dc5a312634ff2f1c0b276dbce848bddf9471dd758cc753869963f7a58dcf98e752e383934e7030b5326c30750ca2dece95b9060510b4"
        }
      ],
      "purl": "pkg:npm/serve-favicon@2.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-favicon@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a0f294ae434e838666be51bd6acfb7af0aa092bfb1b9b05a1dbac34f05617052c48d782523a039165aa639b1453fcf99c36f1dff4ae22e757448099a335302d"
        }
      ],
      "purl": "pkg:npm/serve-index@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39746373ae5526f16d6fb243e47b33488d565b0b08e989c94bb426971d4268342b679bab3487918ed4f205ed586a9357ca85b3adc738caa838acd7bc60cca89e"
        }
      ],
      "purl": "pkg:npm/batch@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.6.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dc6ebcb9f176be22f253aa1b0f67418af505c2441d41d6150352ee8ffd544c064e51c68c6735ac9a0e72de381512b63efd0ce8747da1ec1dbe77a48518c5f822"
        }
      ],
      "purl": "pkg:npm/serve-static@1.6.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.6.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.6.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.6.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "send",
      "version": "0.9.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d3eb094a883622a75c45ca59d7e32ddc0de8f84660e4fc3b8e0848735dde0ba6b6f50d531353da3437bdfdb5ed399d5c09e7522e82140658cb084ab026e864a"
        }
      ],
      "purl": "pkg:npm/send@0.9.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.9.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.9.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2069aca477c057aa29abf4fa678314f2646038c7622d0f9cd708fdbec854ad8deca25d8f36d3d95db8fc058b79f5057127f36b2742a216e2e75493897eab235d"
        }
      ],
      "purl": "pkg:npm/etag@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vhost",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5c232fbd553d5a9b70eb65ccd6e546adc1d1f32e32bd51bd48d8b006067d57d68938fed29edd3a8c4d63e66c48037dd2ba848fc637025c08daf9fd814d25bd2d"
        }
      ],
      "purl": "pkg:npm/vhost@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vhost/-/vhost-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vhost@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vhost/-/vhost-3.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.0.2 used instead of 3.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-braces",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26d549dddc851ae4dd1ff12ecd343b61eb45622b3a39651b64fd27fed15a10eaaa32fc01accdaab2af55f88947567453042d63f5c21cde30737c5c5a69b5be0a"
        }
      ],
      "purl": "pkg:npm/expand-braces@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-braces/-/expand-braces-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-braces@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-braces/-/expand-braces-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.2 used instead of 0.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-slice",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1ba0a768170723fbfd9f6152f5b5279eb7ff4d528564c39b91c7eb2a3d0f60f5df92dba48699dc7533be9456bbada9953510ba679dfced2b41da7cd9d6fbac4"
        }
      ],
      "purl": "pkg:npm/array-slice@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-slice/-/array-slice-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-slice@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-slice/-/array-slice-0.2.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.2.3 used instead of 0.2.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10830722fd945c7585636c6e6d418acfe86af6136410d8f83e3bebee1e7c726260a642b6c8c94a03c238f387fb312b6d933540cbf94bed7f710da20b77a6afcc"
        }
      ],
      "purl": "pkg:npm/braces@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-range",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6eeb0e1c9d2deede5472eb5cc8d0ea99a0d7fb571bd1796ab005204e59a9955bf4ac8a8168c70149944b9640e6d27c6d97c3b7a3f12f451add43f5a7c8f1112d"
        }
      ],
      "purl": "pkg:npm/expand-range@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-range/-/expand-range-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-range@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-range/-/expand-range-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95ae643d42f022091249a663f70eff035b87a8e04080e84350a4390a47cbf0b6784a2eabe3ed83d2123a6f8a3ad0c5b8523db23490115886540cfc65bce61073"
        }
      ],
      "purl": "pkg:npm/is-number@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c87788dc5f6fdb4318fbcff9580520216b1e319c292c3fa5f61e611b2ce1e9f4238657b60308e34436a8d66e48a33483b95bccc34f7f9af13c014d680e664aa5"
        }
      ],
      "purl": "pkg:npm/repeat-string@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "0.10.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95be6e0415be78bce867f4eeb5ef0435c6cdbe26c4ad860fccd863664f4866e801025f3b9144b1cd52c1c10ec56d4daa06ea2b6da87a54e6ee5efa760cdd4b6c"
        }
      ],
      "purl": "pkg:npm/http-proxy@0.10.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-0.10.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@0.10.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-0.10.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma/node_modules/.bin/node-http-proxy"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-http-proxy"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utile",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96d7efb8224d6bf2453a128106243da83cb21702ecb6830c3b5aeed1883f31c97c769d59dc805a2fb9fee5d1e9ca66be777942a209200509d62ad1b1ccdcaa86"
        }
      ],
      "purl": "pkg:npm/utile@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utile/-/utile-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utile@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utile/-/utile-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c027f6291985fda9433464cbfb156bb3e099440b299af90858cc579ccaa1b078ed4c372cb3222e5e44f6535e068292b6bb8e3c53b74dc011e369fbb7b5189dc"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.2.3 used instead of 1.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "i",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ba599e159c5f5c07b8586b0ae20b7705d2255aef80c88a8e45434c906fa0246e22d63817e0617d54db0b2353b1d6e52fc30d9de73ce7f89ec733c515fb084ba"
        }
      ],
      "purl": "pkg:npm/i@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/i/-/i-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/i@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/i/-/i-0.3.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.7 used instead of 0.3.3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ncp",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3df194f2361675197816a25f0b2d08cdb906c851e7b5f5b2819838ea7164fdd243fd746b936723d12b0a497f67e6ee6013413461f129296ac491f8e79594935c"
        }
      ],
      "purl": "pkg:npm/ncp@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ncp/-/ncp-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ncp@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ncp/-/ncp-0.4.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma/node_modules/http-proxy/node_modules/utile/node_modules/.bin/ncp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ncp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "log4js",
      "version": "0.6.22",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7908f750680a583512e1815178da89a0b7d2e42df2dd6c104f1846f42a997713ac987a932ee10007d42a7404efbd30e12fb39938ecff0f5e7d149f208a5826b8"
        }
      ],
      "purl": "pkg:npm/log4js@0.6.22",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/log4js/-/log4js-0.6.22.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/log4js@0.6.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/log4js/-/log4js-0.6.22.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.6.38 used instead of 0.6.22"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "0.x is no longer supported. Please upgrade to 6.x or higher."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "1.1.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5c6aeb292c49180eb7d3cfb729ae578bcfd76795bd282ac2911e5df72bddb02665cb85573674696b406253fec8ed2ce032ba841997e0a523befe967bf33d22a"
        }
      ],
      "purl": "pkg:npm/semver@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-1.1.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma/node_modules/log4js/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "4.3.6 used instead of 1.1.4"
        },
        {
          "name": "ImportedModules",
          "value": "semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 10
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 8
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ddcc8f7131dc8af67f9179cd059473c1070a412e0372bd16b7898102be926027a7a3a9d6839b3679d970db0900cbd90211849eec597a3435f3ac9bb828e56b7"
        }
      ],
      "purl": "pkg:npm/socket.io@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io/-/socket.io-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io/-/socket.io-1.3.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.7 used instead of 1.3.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99728db91ba5231879cd13db274ce737a80e2658e803523fa506994bd4180b03382dd7889e4e6c122a0715e2dac8b260f182fe14daf03d96db96d0d1fc721d18"
        }
      ],
      "purl": "pkg:npm/debug@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7135cd4b8f7daf34d3ce12931c1422298840bc88271d2cc02a04eddf1deaa5f5c3e0ae40b051e1e202d862ebf603201c0e23823877bfdc40227d0727e7b09c3f"
        }
      ],
      "purl": "pkg:npm/engine.io@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io/-/engine.io-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io/-/engine.io-1.5.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.5.4 used instead of 1.5.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64id",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d28ed7e3840b0797d2783898fb7b8fada15db3ab126b1b055ddc22e5b02a7c42689cbce9fb8ab1b431bf1bace73f9eeaf749d3bc9486cd958d6cd590c975429"
        }
      ],
      "purl": "pkg:npm/base64id@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64id/-/base64id-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64id@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64id/-/base64id-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "325b4aed8923fee76d0fbdbc803fd1ace352b705670e904d20fd61f8205c9f09c9747a87c5f58723513c5cba28b5497b34e3c06130825e56fcfd09b2ed6c81d7"
        }
      ],
      "purl": "pkg:npm/debug@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-parser",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "95d240376a1305d0a2b78aed0a004f7a171a5f0b32b28b336e48c1a6e20050304956cbbe0d96ebe7d02f509954c3316c8f0fb8fbaee155beb8760be349296ed3"
        }
      ],
      "purl": "pkg:npm/engine.io-parser@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-parser@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-1.2.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.2 used instead of 1.2.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "after",
      "version": "0.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4ae237bd684215e4a6926989dde7f2b8e92b846ca9fc0b87b618771790e29c6621da447db7fd315259b7fd59f6a8c49c7e083e70a868e5f5bb4d411852161e88"
        }
      ],
      "purl": "pkg:npm/after@0.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/after/-/after-0.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/after@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/after/-/after-0.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arraybuffer.slice",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e998df41a052cba0ae207d3e07436bc4c7c31395483823ffe603aa4a9108b1a019c7dfe08accf3ad783a3d9ec6e7553f9fcf149a502060b350f70027208ecf24"
        }
      ],
      "purl": "pkg:npm/arraybuffer.slice@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arraybuffer.slice@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-arraybuffer",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b004a29554f225efc076ea66101d895ac51ecdc9d3220ff1b1c0b348c1301f2c8138c613761b1732df4fff6b3ab952b7a35e3cc6a568dc06edcd509c7330cce"
        }
      ],
      "purl": "pkg:npm/base64-arraybuffer@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-arraybuffer@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "blob",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06809c0edf330464a19fa0dac00190c37eecf524acf9f123899583cf207ef38d4f6cea20711d97ecb1a5338b11dd9b22abfce8ca5f0c1560df37aa034a5bde05"
        }
      ],
      "purl": "pkg:npm/blob@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/blob/-/blob-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/blob@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/blob/-/blob-0.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.4 used instead of 0.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-binary",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7576da67ef31c53eb99ed416fc6a1a6ca9e49f0da0e1812eea368510adf2199b9dd1f066f25cfd5c93a296488f4fb932dfb979350f6f23ab051320d7f9c60143"
        }
      ],
      "purl": "pkg:npm/has-binary@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.1.6 used instead of 0.1.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utf8",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d65c7afe6d0f11b166b32f3558dd5ed70023d36c11d84a0fd5a0356893e0c1424e542e6d00b8108d6fdb469a3ab61fece79e4045c23873cc26e7f46df195870"
        }
      ],
      "purl": "pkg:npm/utf8@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utf8/-/utf8-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utf8@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utf8/-/utf8-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.0 used instead of 2.0.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b0313b73b92dd6445c0cc3a93ecaf387ce5dc9463379c99cf0024ab74d839588f60cad58c7ce6ca3ea78be8a135c828161c48d9fdf746fb21aaa394dea77183"
        }
      ],
      "purl": "pkg:npm/ws@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-0.5.0.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.8.0 used instead of 0.5.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b192544c3338fa70cca2b4546f6592d27bf98a1ba7fb1aa51e12a02822a2d2ce2723fb63e4d5479449b5de113249d675e6200e44f689e741afeb28bdddb3cf23"
        }
      ],
      "purl": "pkg:npm/nan@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "options",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ce8f72f5ca99bef8dfa7ec211b6dee3bdc0e35e0007bcfe6a6298b2145bfff8ae2f732974308b84f9f0e9a55374a07d839651547204a7c794967e8bd8d512b6"
        }
      ],
      "purl": "pkg:npm/options@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/options/-/options-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/options@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/options/-/options-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ultron",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d8def6b75f5194b0a217f5c151ce3a5ffcad0be7613af3e0c8a432d4a84d0d6ef535c7f16f3fe0a6b33e24f520e382e12e8bb805d22fdf5ed5454f28cefecb13"
        }
      ],
      "purl": "pkg:npm/ultron@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ultron/-/ultron-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ultron@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ultron/-/ultron-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.2 used instead of 1.0.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-binary-data",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bfd9dabadbf22990699d40802c11d25e872c1b0204ad4f828a948a000ba26c96cd9768ee791feaaad1119d419a29eb06fdb6b41f8edda982b247219d74a78122"
        }
      ],
      "purl": "pkg:npm/has-binary-data@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary-data/-/has-binary-data-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary-data@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary-data/-/has-binary-data-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-adapter",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e63805d0c98773b658aa4b7f119e7bc6fd83c79cf846460d42f3f213f8592b83925a0bb5eda31f88b486c9d7607fe6f98126f690145d4fc7d53478f8e7f91de"
        }
      ],
      "purl": "pkg:npm/socket.io-adapter@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-adapter@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ec27af53037c0f202066c588faae28fab862af29bf6cda6b5e6f386e37f788d4669b277c42edf67b3d68d6d064b4ea149c943d06c4a186007428e4fed1d994e"
        }
      ],
      "purl": "pkg:npm/object-keys@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-parser",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7ccfa1224a103e1d2834ba0bef2c77f5fbeda8c9dc45305e92310d14f4fc7446075eabd1602f325b04fe9bd3d6f3099889e51cab3c3bc899c7357ccf002f62f7"
        }
      ],
      "purl": "pkg:npm/socket.io-parser@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-parser@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "62121ba773c98b39c445f8e52242b4b9ee286d9c6dd92eb4fb45bccf6e19ca63874fcb079683aa58ea99454d9e3793a563c534f1516c3f4da57ad72edba16294"
        }
      ],
      "purl": "pkg:npm/component-emitter@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "0.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1288406f7f83487486c7c71aace48a25ef06d1ac95e7f8bad3d383d09da8ac292ec9a7bb4b2652cf66a82e6405dacd0f8f98084c379bc0f1fb185065a8e510d5"
        }
      ],
      "purl": "pkg:npm/debug@0.7.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-0.7.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@0.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-0.7.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "280f861e16132d3a3b462e03ca3c14816f249fdf0062d559b410bde2a2f9c83d1949872df3f785f2a0664cdca4fa03c4e7bf1b29e20be1606af8c532775236ea"
        }
      ],
      "purl": "pkg:npm/json3@3.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.2.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please use the native JSON object instead of JSON 3"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-client",
      "version": "1.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e25d3ae688c967a4bc52053f904be26e93145e9b69b6289716d3415bf98706e80f87b0c40fa4d742c96617f19616a6566acb3b52a21ad0b0a77aa1614919ea44"
        }
      ],
      "purl": "pkg:npm/socket.io-client@1.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-1.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-client@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-1.3.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.7 used instead of 1.3.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "backo2",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce3e99e8cec4abe3c167b3d0c65e4d4faeb932f25d024ce9d1feb49c027eb0b6920813ccc156a4e597a015b8150b315c0894ca168322cef3392ddefe26b4491c"
        }
      ],
      "purl": "pkg:npm/backo2@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/backo2@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-bind",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "599bdeb8a3de2801bda98f859180de003cdd1f24d87486e85d2e7d8b10de4492f9661c69a949f148ec28a781508ccb22626dff3abf1c7a055ba401cd03ba47c7"
        }
      ],
      "purl": "pkg:npm/component-bind@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-bind@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-client",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30e375b138d73978d3d32986eb3b95530b82016ad37f61b11dadeb15abd917fb8f8abe1925ab7e78da646d46c74be6416662c67163e659a01930945ab485fc39"
        }
      ],
      "purl": "pkg:npm/engine.io-client@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-client@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-1.5.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.5.4 used instead of 1.5.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-inherit",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3e2e16111216ada55a93112c86160dcd94fe88bb49042941c44d8f46a193ffa50c96e261c566e156454088a953d9dfab9e54bb6838465a02a6c21764439dd68"
        }
      ],
      "purl": "pkg:npm/component-inherit@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-inherit@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6503c77618769f4fb917ccc0ece6becd49f60fec828774ef2b64f540a88df712e9bb56afc47ff1135e6e8d9dc17f44c89fe1fcc8d117ad480ad9e8f308c4fd2"
        }
      ],
      "purl": "pkg:npm/debug@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-cors",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3319356dadb73cdb41df33e282b7a28c0a52deeb87f5b860664a90b4b423ef27561ec19e6fdb8eb64e20b0aea6663e2b606e95352fc24fd1b55e461f808b692a"
        }
      ],
      "purl": "pkg:npm/has-cors@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-cors/-/has-cors-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-cors@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-cors/-/has-cors-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bdd4e715fcd6dd99024f1da46ed9e9123fb6ea1512d682a4b0689bea1cf64753098705a8106133ab6b6f7e2e7cf31b79599171f500dcc7cdf0b1b403ccf4730"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/global@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/component/global/archive/v2.0.1.tar.gz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://github.com/component/global/archive/v2.0.1.tar.gz"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "url"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "https://github.com/component/global/archive/v2.0.1.tar.gz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parsejson",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5bd091bd37d8418fe46d173943a61359aadbfd00f174419b77a4423fc08b5100c957cf51547a12d80d1d65836d01cab7d5fba518d37866102189041acf094a26"
        }
      ],
      "purl": "pkg:npm/parsejson@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parsejson/-/parsejson-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parsejson@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parsejson/-/parsejson-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "better-assert",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d87a98760c59692b55e61ace9fbe52d150ddbd40848cdc606e530485b0c6365d1c7802f0b458d092e7b8f873fc46acad914b6e02d70dd8a013acc3d7d3e3ab5"
        }
      ],
      "purl": "pkg:npm/better-assert@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/better-assert@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseqs",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf2cb27d01941599c3860aeb767fa187526e39fbdb5d4e6846be9d8a37e44886da16ec4681348203f44d55cb000e6a34936357eb011155330a917a248ee39b24"
        }
      ],
      "purl": "pkg:npm/parseqs@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseqs@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseuri",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f695b4642083b442335bb6de1df2e0d8dd77a6072d39546ad59fb53ca769b05e300fd1a161430003106198f44f555cb57e0db3f9e1fff2ec3c7600348fd0cdcf"
        }
      ],
      "purl": "pkg:npm/parseuri@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseuri@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "0.4.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99689543da9918f5ef2f1438c46cb9f08c79070d0bf7d481fa10d3f0be7d6edcb87db9d0733686978604591ec0ccb4066ef3e7ff7d2bf7fa38d5d3e24ae52663"
        }
      ],
      "purl": "pkg:npm/ws@0.4.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-0.4.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@0.4.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-0.4.31.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma/node_modules/socket.io/node_modules/socket.io-client/node_modules/engine.io-client/node_modules/.bin/wscat"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wscat"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.8.0 used instead of 0.4.31"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1f2f272997550c4c65f6e7b851b2efdaacbfdc51b72f40ce3330ac2f2efcd7b5f75ecc8578ca8b4f4b6758b649c5f8d9847d64a808417afa18fd5cb9bfea113"
        }
      ],
      "purl": "pkg:npm/commander@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57dfcfcb2e4e7a5bfabd524ff57f9d03353720ed7d8fa617ac99ce0c7c4fda1e78853bdf15019a85db1057a5257bf52e9221099354a443f694c96526eb544143"
        }
      ],
      "purl": "pkg:npm/nan@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tinycolor",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f82a2b113b1ed6497df31834580ce28bc0d34f80011784779eaba1ae421b546730d53f0962ce467f1f7111f18834f5191838fd0b80663adb8a79a4edbae46896"
        }
      ],
      "purl": "pkg:npm/tinycolor@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tinycolor/-/tinycolor-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tinycolor@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tinycolor/-/tinycolor-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlhttprequest",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18eea998789ff2bbd9f5875d1287a6e21428d0ebdc4d92673c6c8ac4136c170804c0d6316e97dec327b6ba54c301a9d65d371f976f97284ebf0caed20282aa33"
        }
      ],
      "purl": "pkg:npm/xmlhttprequest@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://github.com/rase-/node-XMLHttpRequest/archive/a6b6f2.tar.gz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlhttprequest@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://github.com/rase-/node-XMLHttpRequest/archive/a6b6f2.tar.gz"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "url"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "https://github.com/rase-/node-XMLHttpRequest/archive/a6b6f2.tar.gz"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "has-binary",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6810727c7ac8888b7a3d0fa3157b0b20554da475725c370267bed567892fc6fe93bd3c22a524c336f2a73cde713a2fdc41373184b6b89415766f8f696464205f"
        }
      ],
      "purl": "pkg:npm/has-binary@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary/-/has-binary-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-component",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b4b0ddda827561d9264d10819cd0dd57e19e4ad097856c606b9ee669b31b948795cb174067bd690c8d15e8ff318a2ddfde821bcd20a731d694249948d7232ac"
        }
      ],
      "purl": "pkg:npm/object-component@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-component@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseuri",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b41fe474bb92d73b1f2c6f1b9f9ef80aad12e9915a6fb4c7f4032597612a8bc28d8c5ab54480221b82969255adfdf3197ac132ded00ec21a1882e2105d1331d"
        }
      ],
      "purl": "pkg:npm/parseuri@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseuri@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-parser",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f44c3da0e43b6b990c1c072f82d117a3ca5364e37add782051466f04044c6b13f7f9465ced57e7749383d147fb57adc68b72065e5d1a6c66f70f54a1daae3f2"
        }
      ],
      "purl": "pkg:npm/socket.io-parser@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-parser@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-2.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "to-array",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25093f40c4b8a07c94d95b9f55eca3376e5d727667af53d5d696b5a0a4a3ee5e6d54ef56ad4eb6a20ddf6330779ab809659801c5daeb03fbfa899ccc0eec8563"
        }
      ],
      "purl": "pkg:npm/to-array@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-array/-/to-array-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-array@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-array/-/to-array-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "useragent",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef88d446c565b4637a31e262761e1ecf1dbc78f49695283925ea864e55e6f51f446e5925a5d25a22f64064c6bed420f3f80f18fbdc16a0b45e1e8398d19e6a63"
        }
      ],
      "purl": "pkg:npm/useragent@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/useragent/-/useragent-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/useragent@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/useragent/-/useragent-2.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "439a40817b3e58401fa04770daa29084d14584ca0531362a45528a50c9f3ba247ba0a1474bb7d6a3ce3c70f7132b0fb88ff21d375ecdcb376154a81a6c557410"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-browserstack-launcher",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69441824af480488b56d6fbbbb770f4c4c77c17ed3df55c203bcac58006c0970cf5ab52ec14222fde9c9a721b15c617456f195ce93c19aa2b93292c74857e6b2"
        }
      ],
      "purl": "pkg:npm/karma-browserstack-launcher@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-browserstack-launcher/-/karma-browserstack-launcher-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-browserstack-launcher@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-browserstack-launcher/-/karma-browserstack-launcher-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserstack",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f97ba745c33629a2a2fa90f83ecb34aa71196fd23b67171dc95c18f6382157a1bc461b0a79548e98bdbd2abbe8f3b4c95010e4f3d4fa72077d0feab8fa0e002"
        }
      ],
      "purl": "pkg:npm/browserstack@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserstack/-/browserstack-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserstack@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserstack/-/browserstack-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-chrome-launcher",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0fd4d957d9f30a4657015b4ad503737fed5d85489e5de8b076caa55e6f2d715b1ef6b7d17ffbeb25f05e497535cdcfb19ec84c1b853ae6dff08400f4c0ba483"
        }
      ],
      "purl": "pkg:npm/karma-chrome-launcher@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-chrome-launcher@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-chrome-launcher/-/karma-chrome-launcher-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-firefox-launcher",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59097afe51deca201975a67802bd896676f44c0886a8d369f38454549a1abde5c22d33a400546a001f1b7fa635cac6befb2798b2ce30bf855c1436e1001b2aee"
        }
      ],
      "purl": "pkg:npm/karma-firefox-launcher@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-firefox-launcher/-/karma-firefox-launcher-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-firefox-launcher@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-firefox-launcher/-/karma-firefox-launcher-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-jasmine",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ede1e701a0456cb068f11a9f7ec86e8f56e4007c87d6b28a4a77e85afc63a5c4bfe60a2ae5d2978631b694b7878025ccac6c1966b15228dd98d16570601d2046"
        }
      ],
      "purl": "pkg:npm/karma-jasmine@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-jasmine@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-jasmine/-/karma-jasmine-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-junit-reporter",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25386de6a84aa1cdcf02891e4bd2d9bd3b3fa4f8a5a87735c1b91bd020e89827bba471f43d0f8ea2b296ca049e9fe372f71c6d8ce7d141ae6a0388824ae3a06f"
        }
      ],
      "purl": "pkg:npm/karma-junit-reporter@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-junit-reporter/-/karma-junit-reporter-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-junit-reporter@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-junit-reporter/-/karma-junit-reporter-0.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87ffa771041253f898c9c988db04cddb9b7b45837b3b6a2af6ebc8fb6f9439b8b829c99087f8d44b8377d60e6f26db50b7b30e0ec9e606d6dc965dd86cdcaf7f"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "karma-ng-scenario",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e339469a97cbc7601e3a677684fbc57931dbe50846e840be9896f8732cc7efb98fa0b3a955f48c1d307d2582c42bf6c45dfdf7c00f2529d4529540393ecb729a"
        }
      ],
      "purl": "pkg:npm/karma-ng-scenario@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-ng-scenario/-/karma-ng-scenario-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-ng-scenario@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-ng-scenario/-/karma-ng-scenario-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-sauce-launcher",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5fdf68067fcd59b9e9aebf84ef78df3ac7741ed7ab57649c742bb4070c5653b8184c22c220b896d6855554776f1313e9bc92719e9fd65135f5d355f1123973a"
        }
      ],
      "purl": "pkg:npm/karma-sauce-launcher@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-sauce-launcher/-/karma-sauce-launcher-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-sauce-launcher@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-sauce-launcher/-/karma-sauce-launcher-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sauce-connect-launcher",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d62a72448c4840bdc6976a72667f73207e2f25ac0153f78a04d804811cd5133f573df2f1f8fc6d45ab28f5f1226b2c0bd4173982e844d8a6dbe0531480da61bb"
        }
      ],
      "purl": "pkg:npm/sauce-connect-launcher@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sauce-connect-launcher/-/sauce-connect-launcher-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sauce-connect-launcher@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sauce-connect-launcher/-/sauce-connect-launcher-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "adm-zip",
      "version": "0.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "407550e9e91d745686afdaf6841502e203f0db02ea3198a85e88edf41c9d40f6d287cbacefe439c5c50252afa19e1e3301d6ae577c2aa18d2ab80a632aaae16c"
        }
      ],
      "purl": "pkg:npm/adm-zip@0.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/adm-zip@0.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.4.7.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.4.16 used instead of 0.4.7"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "saucelabs",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5304c2fb2e32e9909e48c233620ed1d45833b6390914688102f4df57c327dab73cc0e11abc403b65742778085099a478af9e5b485074c10fc855e98cb67395de"
        }
      ],
      "purl": "pkg:npm/saucelabs@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/saucelabs/-/saucelabs-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/saucelabs@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/saucelabs/-/saucelabs-0.1.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.0.1 used instead of 0.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wd",
      "version": "0.3.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afcd65c9948df70e254c94160a5952b6d2b8c0879e930a07e417632e8661dca997ab0952a99fbcd41615fba06dbe0e706a232890c61077a14a09a6134cb005e5"
        }
      ],
      "purl": "pkg:npm/wd@0.3.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wd/-/wd-0.3.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wd@0.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wd/-/wd-0.3.11.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/karma-sauce-launcher/node_modules/.bin/wd"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wd"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.3.12 used instead of 0.3.11"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "archiver",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a4567f1714ad26f7b446acc3cfe3bce4809bce9eeb2c90d10236428783ede6f2d48ea792e8f92161f21dd951140363cb7088a765d8bc474fcfb9f8344228de8"
        }
      ],
      "purl": "pkg:npm/archiver@0.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/archiver/-/archiver-0.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archiver@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/archiver/-/archiver-0.12.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.14.4 used instead of 0.12.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-stream",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad041fb4473f5efdcd89d84690221a6a0128cd504841ba61bb95b3bd3ba4530e9a60969d459d3840f108cce012309e2bfffed71918b49ad5fc9b6bbb06ac6b33"
        }
      ],
      "purl": "pkg:npm/tar-stream@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-stream/-/tar-stream-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-stream/-/tar-stream-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.5 used instead of 1.0.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.46.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "708e81b6d9016e220f281983af3a343afba8f5d95519dfa1ae8bbb3bfc44a58e1ae8486f3d83f2891eea41bd1af90df8ab9b9ac5fabaa8974e8666347eea5b94"
        }
      ],
      "purl": "pkg:npm/request@2.46.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.46.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.46.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.46.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.55.0 used instead of 2.46.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vargs",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "77f8f590c52dd188cb0903c023e54c67b20ac0d1a393c7521cc0ab1eaf6dc45382702203a1ef1c93d1663ef001260c486993b5b5a6d798da23406ea60642cb0b"
        }
      ],
      "purl": "pkg:npm/vargs@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vargs/-/vargs-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vargs@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vargs/-/vargs-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "karma-script-launcher",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eac97948224c9006ab112865ed35ff4fa7db07c6574c2537486e14cc3221733a17b08f6b6bcd3560d2b111ef7f74e5e6442082dbe956945beddf6bc292e9d0f4"
        }
      ],
      "purl": "pkg:npm/karma-script-launcher@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/karma-script-launcher/-/karma-script-launcher-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/karma-script-launcher@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/karma-script-launcher/-/karma-script-launcher-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-grunt-tasks",
      "version": "0.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39432f5ecb074235f5459db8a2e05ba28ba3d23a0c8dcf0e02b44c6d710a4c87c2b86b406cc96f4548ab5dd24329978f770411213fe90165daae3a3762b3d469"
        }
      ],
      "purl": "pkg:npm/load-grunt-tasks@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-grunt-tasks/-/load-grunt-tasks-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-grunt-tasks@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-grunt-tasks/-/load-grunt-tasks-0.6.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "load-grunt-tasks"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "Gruntfile.js",
            "line": 11
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multimatch",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d858cd89ff2cb76c4ff45a31f665d3acd7cb449d76a1a63661f95dc54864abf933c83b3969dc8817f92a965b58b6e1e996a457c1a7dadb617f0bfa832153c4a"
        }
      ],
      "purl": "pkg:npm/multimatch@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multimatch/-/multimatch-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multimatch/-/multimatch-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-differ",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44698111b487e23c3538b99d26d6442f93fa02f80a47d499185e0a4285a70a677e4156a33d434420c4ae4b5ab464476c314ba32862020ec820e339e4cef2a2dd"
        }
      ],
      "purl": "pkg:npm/array-differ@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-differ@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-differ/-/array-differ-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d571abda6add63f57f42bd1667a912a523730ce3e5e80dd8eb396cad9059dccb66768523d8c9312d341353c8cad7faaed8c3e5bf7b89144460a2007d30132fb"
        }
      ],
      "purl": "pkg:npm/array-union@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f6c99a311ad45dae6bd5d78d9643c00bc6903f9d08a11a23b49165640383b576651b0859f71e362eeb09cacecfe006107f8098842a193ae83b524c45593396a"
        }
      ],
      "purl": "pkg:npm/array-uniq@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promises-aplus-tests",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "26bfd248e1bc0679457be9c2ba4032360bebd6d78f47838656d998ca3601538424c88f7aa8c99a188d5bc0c5700d28d8296be78b4188a46aaabecb5525639ae7"
        }
      ],
      "purl": "pkg:npm/promises-aplus-tests@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promises-aplus-tests/-/promises-aplus-tests-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promises-aplus-tests@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promises-aplus-tests/-/promises-aplus-tests-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/promises-aplus-tests"
        },
        {
          "name": "cdx:npm:bin",
          "value": "promises-aplus-tests"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.1.2 used instead of 2.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mocha",
      "version": "1.21.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e0dabd18acb087b66a7c5bb1f22f34a66dd89db7783523adc784298ea991f8bf31619ad1dc630728026a6c24a2f5e361def4d0361c9a66b33f5a9980f1a19d5"
        }
      ],
      "purl": "pkg:npm/mocha@1.21.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mocha/-/mocha-1.21.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@1.21.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mocha/-/mocha-1.21.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/promises-aplus-tests/node_modules/.bin/_mocha, /app/node_modules/promises-aplus-tests/node_modules/.bin/mocha"
        },
        {
          "name": "cdx:npm:bin",
          "value": "_mocha, mocha"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.5.3 used instead of 1.21.5"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Mocha v1.x is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "083e39d9f9e4d2343293735f9caf8a911fe150fa07b79a5568a1e882dcb2bf737453841f01a97d5b4feb5cb3a0fef55981029aee376d5f2a4ab356008a9d75b9"
        }
      ],
      "purl": "pkg:npm/commander@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7311bef7bde9971695267e1ddfb2d6b8607cf797079bc57bda5a63db16ff5aa6e8d00560e792b3c32d72d0b35819a3844258c0ec4fcf6bd0f7ffcfcff4d9318"
        }
      ],
      "purl": "pkg:npm/diff@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-1.0.8.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.0 used instead of 1.0.8"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "710a5489dedb7535271629fc4bb06735d3a4fbf783a9098a80200d4b277f8c086b284bf152fafd550f176735e23ad7acb7c34b7e4dc5481673c2f7a664d43a56"
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58f68bb0c1c3d65604a80988408e9538948fc2e05d1928435a78f5c94a34bd0a843bcd3d47c5b72ccf4e554d770a79c3872bff1223703adc445bbe129abcd2eb"
        }
      ],
      "purl": "pkg:npm/glob@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-3.2.3.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.2.11 used instead of 3.2.3"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eaeb5b2faa15c705363cd0ab2e2eb22d27d03460fd4f49e892e21862efb35c3d07fe17ec9a80e4a486e85974d0fb35f01ca479b8f7914a51399173283317438"
        }
      ],
      "purl": "pkg:npm/growl@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growl/-/growl-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growl/-/growl-1.8.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.9.2 used instead of 1.8.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jade",
      "version": "0.26.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a4937bf3507163cca8e90977aef888d77990fe40e4e351476e6e0987b474c3c2f00ed994e43134d5adaa6db39096cf726f26bca1ff82966698de66b09ea59dc"
        }
      ],
      "purl": "pkg:npm/jade@0.26.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jade@0.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jade/-/jade-0.26.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/promises-aplus-tests/node_modules/mocha/node_modules/.bin/jade"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jade"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "387b1d51c54043aa4eb60e49616a42068f56fc6c9256ec2f3fd86e791316ed4aac842d2d6dfccbbfcc23c924cf9b7b5f519ff6d4213d135a496a0380f753f17b"
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sinon",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732b2b332aeb88bc129f961ef36c530805554ba43a5cbc65644de3b4f6f82059e0da7a4dde54164395326ae77a711a73ced6c4cb6b1b264ac349b225e8e29408"
        }
      ],
      "purl": "pkg:npm/sinon@1.14.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sinon/-/sinon-1.14.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sinon@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sinon/-/sinon-1.14.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.17.7 used instead of 1.14.1"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "16.1.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "formatio",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "70f87b8acea4dddf2d21487ea675d7b806c3fee8525c682a2cfc3452b629bf995f749f8c30c4a3c78d09369a8fed3a29f4db76e58a265848919a41db3af90268"
        }
      ],
      "purl": "pkg:npm/formatio@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/formatio/-/formatio-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/formatio@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/formatio/-/formatio-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is unmaintained. Use @sinonjs/formatio instead"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "samsam",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8952fb2e26e9337b65e2b40fc1e3975eb9a319e831c76edf9533a3404643dcf5dee2864d173bb3e928b89a095e2bf25653f8720afb55d35454a2f8ef044a439b"
        }
      ],
      "purl": "pkg:npm/samsam@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/samsam/-/samsam-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/samsam@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/samsam/-/samsam-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package has been deprecated in favour of @sinonjs/samsam"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lolex",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c0666b177025016c46da3fba372cadb59fd45715bca3f17eab4d48506b9fd8f884200506f5abffbe9052e534074d0b733e63c90780995a3c32191e02e1a5fcdf"
        }
      ],
      "purl": "pkg:npm/lolex@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lolex/-/lolex-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lolex@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lolex/-/lolex-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.3.2 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "protractor",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb103d8f79124a6f7fb79de2f1c2b18333951b2043e070c01b1add392271255a8ef3714a01a36b4134040262cef37dce0e70f4baa8c5badeeb48cafb84126404"
        }
      ],
      "purl": "pkg:npm/protractor@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/protractor/-/protractor-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/protractor@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/protractor/-/protractor-2.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/protractor, /app/node_modules/.bin/webdriver-manager"
        },
        {
          "name": "cdx:npm:bin",
          "value": "protractor, webdriver-manager"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.5.1 used instead of 2.1.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "We have news to share - Protractor is deprecated and will reach end-of-life by Summer 2023. To learn more and find out about other options please refer to this post on the Angular blog. Thank you for using and contributing to Protractor. https://goo.gle/state-of-e2e-in-angular"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "accessibility-developer-tools",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ede118b41a626dcbbb38327050d8748a4c76836267ae9b50387e94d5b5943b970776253be700f6cd99b6f8457864e3c85f4fbb9c9c571496360039228b471399"
        }
      ],
      "purl": "pkg:npm/accessibility-developer-tools@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accessibility-developer-tools/-/accessibility-developer-tools-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accessibility-developer-tools@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accessibility-developer-tools/-/accessibility-developer-tools-2.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "adm-zip",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "498222a8b7ebe90be610cd32c3cf660fc6dad878caf9db9fee854f130efdf8d3c3ab241270053c2200cf67316df4255d0f6c9a02e589a854062e4a27801e9c25"
        }
      ],
      "purl": "pkg:npm/adm-zip@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/adm-zip@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/adm-zip/-/adm-zip-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.6.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1d31918f442e80764ee2491a3dc9c82dab207a660760c4db83522ccbadf1f1bacb9b2d8814bc8c7a21da4476094a13c58ed82e497e55577d1bedb483aeeacd35"
        }
      ],
      "purl": "pkg:npm/lru-cache@2.6.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.6.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-2.6.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.7.3 used instead of 2.6.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-entities",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "728ed3d45096d1e381f8dfde9c7a2d729ef5c6a1dc5e3d82396793da857779d8df4886cf977195cf2811518fd5a1365dc01cd43aefe475220a98fee99525df47"
        }
      ],
      "purl": "pkg:npm/html-entities@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-entities/-/html-entities-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-entities@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-entities/-/html-entities-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.1.3 used instead of 1.1.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4639ec1a4b5d54b41301af33168778a437b7e521fe289d70db33f16f92d6859c4bea97d508b718292381bd8248a68f95c5fca50123c2a7d080a9d0f58c20acfc"
        }
      ],
      "purl": "pkg:npm/jasmine@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine/-/jasmine-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine/-/jasmine-2.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/protractor/node_modules/.bin/jasmine"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jasmine"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.2 used instead of 2.3.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasmine-core",
      "version": "2.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69865d9dbca0ec06796aac72567d9f47c380b66d926e79d028e548710168c13dcca41e4388db0f2d71d2cd03013842f6f9af42bcfa75ff2636678b387a0e5807"
        }
      ],
      "purl": "pkg:npm/jasmine-core@2.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasmine-core@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasmine-core/-/jasmine-core-2.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasminewd",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a0c63d715e24ab16adfe90d5f5bb79579a85608f9f193aea99106ed240dea0866bf093e94e15b272ab076bbbec9b084489ce519efa9b38737dcd06897cf315c"
        }
      ],
      "purl": "pkg:npm/jasminewd@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasminewd/-/jasminewd-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasminewd@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasminewd/-/jasminewd-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jasminewd2",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64112bfcec8a8e8952133a004a70baa865b06a3ba0c63ebddebcfbb97904392c7ddc19bccd4dd12db8008198709a4ad7ca3a0abf55e94db843ef0faab3e17f55"
        }
      ],
      "purl": "pkg:npm/jasminewd2@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jasminewd2/-/jasminewd2-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jasminewd2@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jasminewd2/-/jasminewd2-0.0.5.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.0.6 used instead of 0.0.5"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minijasminenode",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b8f4fd4e3eec40bd77fec09128a16b474b4fdccf093c4af464773be7eaf9ad471001be6c66c59f492d685bb720256c4017032c6c4f55aaa014f2c17092ff4a67"
        }
      ],
      "purl": "pkg:npm/minijasminenode@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minijasminenode/-/minijasminenode-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minijasminenode@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minijasminenode/-/minijasminenode-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/protractor/node_modules/.bin/minijasminenode"
        },
        {
          "name": "cdx:npm:bin",
          "value": "minijasminenode"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f52545713dfbb00a5acf2c688cdc9f1205444c0d6a756463291cb53f8b8caa2136e3e8e6d2f02d2d7201fe17562a56059b050b3b3f383f7c04eb491f9d82cf3"
        }
      ],
      "purl": "pkg:npm/q@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.\n\n(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)"
        },
        {
          "name": "ImportedModules",
          "value": "q"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.36.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8958a2febb8c1fd8bc93ef876183ea8be9dbd4f6e0cfb50e4c66c5122ca197bb8337c3e1c8557694625af172c8512e6dcade6c70445c2e4c2abc2345f3856fd9"
        }
      ],
      "purl": "pkg:npm/request@2.36.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.36.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.36.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.36.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.57.0 used instead of 2.36.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97a4e8209228b698566a1c711f2ccaf5b9cb47a90ce232482202d28597aa2d8ee26e81e81a4760165ed6dbf22f8b84a43096062aa5bcbd2ba4d2e2948faaac4b"
        }
      ],
      "purl": "pkg:npm/async@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a0f95ceb23b4e352898ed2b8c3e945dac2c8f9d32927e6c07fc4a356fc87a7c73455cb0ff0b7d03614bcd8a462ffaf4406e61c9763c9cbc7fda6f14bada0372"
        }
      ],
      "purl": "pkg:npm/hawk@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.3.1 used instead of 1.0.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4ebdf54a1e459caf582a6ef14d43f20ccb0d3af32a9150cd0f4cef2bf5a08fbfc7f6af26a727b4a86da7573ae7b2f2e172c5f90eda970f495ad24b3aae43c219"
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.8.2 used instead of 0.3.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed15393f31cbaf397b4569ee06089db847061c8555646e2947246167086f1fbad505cc4eb5029410cf56a316bd95fd8e393095efbfd66c5b943b7164a49d1c93"
        }
      ],
      "purl": "pkg:npm/tough-cookie@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6.0.2 used instead of 1.1.0"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "ReDoS vulnerability parsing Set-Cookie https://nodesecurity.io/advisories/130"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "selenium-webdriver",
      "version": "2.45.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "654b9aa738031d1f6411bc0c3008c7020cb698e236a5c95f2dfa09336a740285eb2de4e06cdd7f2a278ac5d19ab4480c1785f5f4d53e9c3e8502e6531c0af5a7"
        }
      ],
      "purl": "pkg:npm/selenium-webdriver@2.45.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-2.45.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/selenium-webdriver@2.45.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-2.45.1.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.47.0 used instead of 2.45.1"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f8b5d9480dc9875af0b0294d3bbda4aed3793478603c7d09681e8cc451f2226008d9075fa6abae3bfbf1fc501936cf1f72a97577917e8fdad0af895aad0f3bd7"
        }
      ],
      "purl": "pkg:npm/rimraf@2.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.3.4.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/protractor/node_modules/selenium-webdriver/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.7.1 used instead of 2.3.4"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Rimraf versions prior to v4 are no longer supported"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b4f431a64e270634e0bbe7878a35a1817d9dfad13a1d0c8c3d59f36396f5a9e9d3505b3105a2a5cc415417e5d57db4e816e5459bc857f8fcd5f6edcf7b00d9e1"
        }
      ],
      "purl": "pkg:npm/once@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.3.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.4.0 used instead of 1.3.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63a4f50deeabe3c0e729fc94990e91701f3c22e94d936adfa84912caa8fef074a827ea95eb0b15e71997b2a308692303843b341032c44e55563ac26ce0ffeb59"
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.8.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3.1.5 used instead of 2.0.8"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.24",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cfa4db527823a7bc0c58828d7944ee036e284535be1c608decb9418143df3730afe49fc9b0bb2e17fa8187ab42512dbe00b190ff85395b82f8c9493ba88156ae"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.24",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.24.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.24",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.24.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f262752aeef8dea0ff3ca98ef4383ecbb0574f0cd480a75782e79c7c8c8e5471667b3e0932a305f95f8cebce1bb664171e5c33cab26a465dcd60396d1837fa09"
        }
      ],
      "purl": "pkg:npm/ws@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-0.7.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "0.8.1 used instead of 0.7.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bufferutil",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6edb4456d92b7b8558ad91fe7226ad8c0a53b9a73b8cb3105d55f333fca6c3cd9615111d3ab24ee3de82e01921d3f15f62805448e15a018177d9ae50f1dca22f"
        }
      ],
      "purl": "pkg:npm/bufferutil@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bufferutil/-/bufferutil-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bufferutil@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bufferutil/-/bufferutil-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.1 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bindings",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb870140d7a95b1600e7916e9d948cef0322e79c9068dd28b678618a5368587ab431f39f25e431d2fd26451a68946384c4f8d9725e85b41d0107c5e46fcf05d2"
        }
      ],
      "purl": "pkg:npm/bindings@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bindings/-/bindings-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bindings@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bindings/-/bindings-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "1.8.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eb4f73435877029807ffde2a99b6c49254ab8dc6185c21e7b16938300a23ab8394937b627610d884f68c6ac3052ac64f67deabe1e400d616d1d96e07effefb5c"
        }
      ],
      "purl": "pkg:npm/nan@1.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-1.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@1.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-1.8.4.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.28.0 used instead of 1.8.4"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "2.4.0 used instead of 1.8.4"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utf-8-validate",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42c82ed6ed9a91dc8e9debab50455ffed5e192a050328137c74198e7e3fb6b23c7bd5cd3a8e92480186d976eb09ba6a9d74026870cb48c884fc0c1b2c31efa41"
        }
      ],
      "purl": "pkg:npm/utf-8-validate@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utf-8-validate/-/utf-8-validate-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utf-8-validate@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utf-8-validate/-/utf-8-validate-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.2.2 used instead of 1.1.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml2js",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f4445dc4b3a8e046b33031c04bfbecb998935c832eafac9d7117f31ab155278a8cefccc3de885480f242ecd6291b0779ae74b4b9f4b274c242961ea3c87f95d3"
        }
      ],
      "purl": "pkg:npm/xml2js@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml2js@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml2js/-/xml2js-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "sax",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f22a7eaa7461ee6f0e132be8335268481ce5adea69dda8d547c9ea82b7d38a0f937b07f2bd38a39746a6f3f6a716a81b71dcfada87c450a13584734309d6de49"
        }
      ],
      "purl": "pkg:npm/sax@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-0.6.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c09433ab4285e59947511d8b7e44e575f4fdd6b79c4a120406ed6b5afddbb8c959ee57f225af17ade3ae363c51ae7c5d92a1133eafae17b4600dc5e0639d13e3"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-2.6.2.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "15.1.1 used instead of 2.6.2"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "lodash",
      "version": "3.5.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "782da08baa44a175c058acf57cabd69c0d3039d04fb2f4d5153ef5b338cce9d1680c4f659629caf35c56e041f843117ec0d66855e2c8c54a76d410cf9e2327e2"
        }
      ],
      "purl": "pkg:npm/lodash@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-3.5.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "lodash"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 9
          },
          {
            "location": "lib/grunt/utils.js",
            "line": 10
          },
          {
            "location": "lib/versions/version-info.js",
            "line": 7
          },
          {
            "location": "scripts/npm/clean-shrinkwrap.js",
            "line": 10
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80628e49ab7bdf3d15f3004aa3d006c596727a4733062ade87584792d6edfa46fd69cb0207939f5421760c25a5ced710debe6834dedfd812f4076c4e72827f0d"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.32",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86d4322ebad12e443ced97eb8abe3fc8dfaf01477a0cd8d56b21234d21d7bb6f40610270e7b238ff110bfccea9e84ff0a0f349c2f66deab565cdcee014425c71"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.32",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.32.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.32.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q-io",
      "version": "1.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64f69d9cfba82b345358cedb6d50b7f1aef2e8939af11ee5ad66ecafeb4cb2a873105f063b194ca6d42ced04ed76c1ccdc9089689be13957f0504b2c7589a531"
        }
      ],
      "purl": "pkg:npm/q-io@1.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q-io/-/q-io-1.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q-io@1.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q-io/-/q-io-1.12.0.tgz"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "1.13.6 used instead of 1.12.0"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qq",
      "version": "0.3.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a314358c827ac8062efba9185a6b67ea74405d63ef8de4361ca863cc99c6f5836f2df19b3fca30b2fe9c2d82249cc9ecba79e93e52701e6d6789da32f658af85"
        }
      ],
      "purl": "pkg:npm/qq@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qq/-/qq-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qq@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qq/-/qq-0.3.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "qq"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "changelog.js",
            "line": 11
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "0.8.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ad301fb9357da8e750233e81297b36f8363b10d2acab13fdc21aa327253480528feca2b8abc4aa3d702befd98798cbbfaea5275a94cf2ba7398ef1692e4a5066"
        }
      ],
      "purl": "pkg:npm/q@0.8.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-0.8.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@0.8.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-0.8.4.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.\n\n(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)"
        },
        {
          "name": "ImportedModules",
          "value": "q"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "compare-master-to-stable.js",
            "line": 8
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rewire",
      "version": "2.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96c859d437ec32a6e54c580a1cb0385d6572301cc93bb3ba8977a6d00b69a4cf949f15459ce0a899540dfe51557e8456ef0505df90a205be91b419edaaa7157b"
        }
      ],
      "purl": "pkg:npm/rewire@2.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rewire/-/rewire-2.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rewire@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rewire/-/rewire-2.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sorted-object",
      "version": "1.0.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42d1f60d2bdb52f5530cd35f36dd6823331606ab02146edbb852532bc021fb7e59bdb98a0346448a0c39a4f0df2eb2ff2f60ecf38943ef62649cec3b899abbb7"
        }
      ],
      "purl": "pkg:npm/sorted-object@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sorted-object/-/sorted-object-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sorted-object@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sorted-object/-/sorted-object-1.0.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "sorted-object"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "scripts/npm/clean-shrinkwrap.js",
            "line": 11
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/bootstrap@3.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/util@0.10.3",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/assert@1.1.2",
      "dependsOn": [
        "pkg:npm/util@0.10.3"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@0.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.3.0",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/inline-source-map@0.3.1",
      "dependsOn": [
        "pkg:npm/source-map@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/combine-source-map@0.3.0",
      "dependsOn": [
        "pkg:npm/convert-source-map@0.3.5",
        "pkg:npm/inline-source-map@0.3.1",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@1.1.13",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.1",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.4.7",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/defined@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonparse@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through@2.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/JSONStream@0.8.4",
      "dependsOn": [
        "pkg:npm/jsonparse@0.0.5",
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@1.0.33",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.1",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/xtend@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@0.5.1",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/xtend@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/callsite@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rfile@1.0.0",
      "dependsOn": [
        "pkg:npm/callsite@1.0.0",
        "pkg:npm/resolve@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.3.7",
      "dependsOn": [
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.2.5",
      "dependsOn": [
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/ruglify@1.0.0",
      "dependsOn": [
        "pkg:npm/rfile@1.0.0",
        "pkg:npm/uglify-js@2.2.5"
      ]
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.34",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.5.4",
      "dependsOn": [
        "pkg:npm/camelcase@1.0.2",
        "pkg:npm/decamelize@1.0.0",
        "pkg:npm/window-size@0.1.0",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.4.19",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/source-map@0.1.34",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/yargs@3.5.4"
      ]
    },
    {
      "ref": "pkg:npm/umd@2.1.0",
      "dependsOn": [
        "pkg:npm/rfile@1.0.0",
        "pkg:npm/ruglify@1.0.0",
        "pkg:npm/through@2.3.6",
        "pkg:npm/uglify-js@2.4.19"
      ]
    },
    {
      "ref": "pkg:npm/browser-pack@3.2.0",
      "dependsOn": [
        "pkg:npm/JSONStream@0.8.4",
        "pkg:npm/combine-source-map@0.3.0",
        "pkg:npm/concat-stream@1.4.7",
        "pkg:npm/defined@0.0.0",
        "pkg:npm/through2@0.5.1",
        "pkg:npm/umd@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browser-resolve@1.8.2",
      "dependsOn": [
        "pkg:npm/resolve@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/pako@0.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserify-zlib@0.1.4",
      "dependsOn": [
        "pkg:npm/pako@0.2.6"
      ]
    },
    {
      "ref": "pkg:npm/base64-js@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-array@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@2.8.2",
      "dependsOn": [
        "pkg:npm/base64-js@0.0.7",
        "pkg:npm/ieee754@1.1.4",
        "pkg:npm/is-array@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/builtins@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commondir@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/date-now@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/console-browserify@1.1.0",
      "dependsOn": [
        "pkg:npm/date-now@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/constants-browserify@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ripemd160@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sha.js@2.3.6",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/create-hash@1.1.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/ripemd160@1.0.0",
        "pkg:npm/sha.js@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/browserify-aes@1.0.0",
      "dependsOn": [
        "pkg:npm/create-hash@1.1.1",
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/bn.js@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserify-rsa@1.1.1",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/brorand@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hash.js@1.0.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/elliptic@1.0.1",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/brorand@1.0.5",
        "pkg:npm/hash.js@1.0.2",
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimalistic-assert@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asn1.js@1.0.3",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/asn1.js-rfc3280@1.0.0",
      "dependsOn": [
        "pkg:npm/asn1.js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/pemstrip@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-asn1@2.0.0",
      "dependsOn": [
        "pkg:npm/asn1.js-rfc3280@1.0.0",
        "pkg:npm/asn1.js@1.0.3",
        "pkg:npm/pemstrip@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/browserify-sign@2.8.0",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/browserify-rsa@1.1.1",
        "pkg:npm/elliptic@1.0.1",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/parse-asn1@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/create-ecdh@2.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/elliptic@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/create-hmac@1.1.3",
      "dependsOn": [
        "pkg:npm/create-hash@1.1.1",
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/miller-rabin@1.1.5",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/brorand@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/randombytes@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diffie-hellman@3.0.1",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/miller-rabin@1.1.5",
        "pkg:npm/randombytes@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pbkdf2-compat@3.0.2",
      "dependsOn": [
        "pkg:npm/create-hmac@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/browserify-rsa@2.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/randombytes@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-asn1@3.0.0",
      "dependsOn": [
        "pkg:npm/asn1.js@1.0.3",
        "pkg:npm/browserify-aes@1.0.0",
        "pkg:npm/create-hash@1.1.1",
        "pkg:npm/pbkdf2-compat@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/public-encrypt@2.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@1.3.0",
        "pkg:npm/browserify-rsa@2.0.0",
        "pkg:npm/create-hash@1.1.1",
        "pkg:npm/parse-asn1@3.0.0",
        "pkg:npm/randombytes@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/crypto-browserify@3.9.13",
      "dependsOn": [
        "pkg:npm/browserify-aes@1.0.0",
        "pkg:npm/browserify-sign@2.8.0",
        "pkg:npm/create-ecdh@2.0.0",
        "pkg:npm/create-hash@1.1.1",
        "pkg:npm/create-hmac@1.1.3",
        "pkg:npm/diffie-hellman@3.0.1",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/pbkdf2-compat@3.0.2",
        "pkg:npm/public-encrypt@2.0.0",
        "pkg:npm/randombytes@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/deep-equal@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify@0.0.1",
      "dependsOn": [
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shasum@1.0.1",
      "dependsOn": [
        "pkg:npm/json-stable-stringify@0.0.1",
        "pkg:npm/sha.js@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/deps-sort@1.3.5",
      "dependsOn": [
        "pkg:npm/JSONStream@0.8.4",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/minimist@0.2.0",
        "pkg:npm/shasum@1.0.1",
        "pkg:npm/through2@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/domain-browser@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer2@0.0.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/events@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.3.1",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.4",
      "dependsOn": [
        "pkg:npm/once@1.3.1",
        "pkg:npm/once@1.3.2",
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.0",
      "dependsOn": [
        "pkg:npm/balanced-match@0.2.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@2.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.5.3",
      "dependsOn": [
        "pkg:npm/inflight@1.0.4",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@2.0.4",
        "pkg:npm/minimatch@2.0.8",
        "pkg:npm/once@1.3.1",
        "pkg:npm/once@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/Base64@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-browserify@1.7.0",
      "dependsOn": [
        "pkg:npm/Base64@0.2.1",
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/https-browserify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/JSONStream@0.7.4",
      "dependsOn": [
        "pkg:npm/jsonparse@0.0.5",
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/esprima-fb@3001.0001.0000-dev-harmony-fb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/astw@1.1.0",
      "dependsOn": [
        "pkg:npm/esprima-fb@3001.0001.0000-dev-harmony-fb"
      ]
    },
    {
      "ref": "pkg:npm/lexical-scope@1.1.0",
      "dependsOn": [
        "pkg:npm/astw@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/process@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/insert-module-globals@6.2.1",
      "dependsOn": [
        "pkg:npm/JSONStream@0.7.4",
        "pkg:npm/combine-source-map@0.3.0",
        "pkg:npm/concat-stream@1.4.7",
        "pkg:npm/lexical-scope@1.1.0",
        "pkg:npm/process@0.6.0",
        "pkg:npm/through@2.3.6",
        "pkg:npm/xtend@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/indexof@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-wrap@1.0.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/xtend@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@1.1.1",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/xtend@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/stream-splicer@1.3.1",
      "dependsOn": [
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/readable-wrap@1.0.0",
        "pkg:npm/through2@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/labeled-stream-splicer@1.0.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/stream-splicer@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/acorn@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/estraverse@1.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esutils@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prelude-ls@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-check@0.3.1",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/levn@0.2.5",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.1",
        "pkg:npm/type-check@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/optionator@0.5.0",
      "dependsOn": [
        "pkg:npm/deep-is@0.1.3",
        "pkg:npm/fast-levenshtein@1.0.6",
        "pkg:npm/levn@0.2.5",
        "pkg:npm/prelude-ls@1.1.1",
        "pkg:npm/type-check@0.3.1",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/escodegen@1.6.1",
      "dependsOn": [
        "pkg:npm/esprima@1.2.5",
        "pkg:npm/estraverse@1.9.3",
        "pkg:npm/esutils@1.1.6",
        "pkg:npm/optionator@0.5.0",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/detective@4.0.0",
      "dependsOn": [
        "pkg:npm/acorn@0.9.0",
        "pkg:npm/defined@0.0.0",
        "pkg:npm/escodegen@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/path-platform@0.11.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parents@1.0.1",
      "dependsOn": [
        "pkg:npm/path-platform@0.11.15"
      ]
    },
    {
      "ref": "pkg:npm/shallow-copy@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-combiner2@1.0.2",
      "dependsOn": [
        "pkg:npm/duplexer2@0.0.2",
        "pkg:npm/through2@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/subarg@0.0.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10"
      ]
    },
    {
      "ref": "pkg:npm/object-keys@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@2.1.2",
      "dependsOn": [
        "pkg:npm/object-keys@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/through2@0.4.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/xtend@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/module-deps@3.7.5",
      "dependsOn": [
        "pkg:npm/JSONStream@0.7.4",
        "pkg:npm/browser-resolve@1.8.2",
        "pkg:npm/concat-stream@1.4.7",
        "pkg:npm/defined@0.0.0",
        "pkg:npm/detective@4.0.0",
        "pkg:npm/duplexer2@0.0.2",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimist@0.2.0",
        "pkg:npm/parents@1.0.1",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/resolve@1.1.6",
        "pkg:npm/shallow-copy@0.0.1",
        "pkg:npm/stream-combiner2@1.0.2",
        "pkg:npm/subarg@0.0.1",
        "pkg:npm/through2@0.4.2",
        "pkg:npm/xtend@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/os-browserify@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-platform@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parents@0.0.3",
      "dependsOn": [
        "pkg:npm/path-platform@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-browserify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process@0.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystring-es3@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@0.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shell-quote@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-browserify@1.0.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/minimist@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/subarg@1.0.0",
      "dependsOn": [
        "pkg:npm/minimist@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/syntax-error@1.1.2",
      "dependsOn": [
        "pkg:npm/acorn@0.9.0"
      ]
    },
    {
      "ref": "pkg:npm/process@0.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timers-browserify@1.4.0",
      "dependsOn": [
        "pkg:npm/process@0.10.1"
      ]
    },
    {
      "ref": "pkg:npm/tty-browserify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystring@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url@0.10.3",
      "dependsOn": [
        "pkg:npm/punycode@1.3.2",
        "pkg:npm/querystring@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/vm-browserify@0.0.4",
      "dependsOn": [
        "pkg:npm/indexof@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/browserify@7.0.3",
      "dependsOn": [
        "pkg:npm/JSONStream@0.8.4",
        "pkg:npm/assert@1.1.2",
        "pkg:npm/browser-pack@3.2.0",
        "pkg:npm/browser-resolve@1.8.2",
        "pkg:npm/browserify-zlib@0.1.4",
        "pkg:npm/buffer@2.8.2",
        "pkg:npm/builtins@0.0.7",
        "pkg:npm/commondir@0.0.1",
        "pkg:npm/concat-stream@1.4.7",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/constants-browserify@0.0.1",
        "pkg:npm/crypto-browserify@3.9.13",
        "pkg:npm/deep-equal@0.2.2",
        "pkg:npm/defined@0.0.0",
        "pkg:npm/deps-sort@1.3.5",
        "pkg:npm/domain-browser@1.1.4",
        "pkg:npm/duplexer2@0.0.2",
        "pkg:npm/events@1.0.2",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/http-browserify@1.7.0",
        "pkg:npm/https-browserify@0.0.0",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/insert-module-globals@6.2.1",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/labeled-stream-splicer@1.0.2",
        "pkg:npm/module-deps@3.7.5",
        "pkg:npm/os-browserify@0.1.2",
        "pkg:npm/parents@0.0.3",
        "pkg:npm/path-browserify@0.0.0",
        "pkg:npm/process@0.8.0",
        "pkg:npm/punycode@1.2.4",
        "pkg:npm/querystring-es3@0.2.1",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/resolve@0.7.4",
        "pkg:npm/shallow-copy@0.0.1",
        "pkg:npm/shasum@1.0.1",
        "pkg:npm/shell-quote@0.0.1",
        "pkg:npm/stream-browserify@1.0.0",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/subarg@1.0.0",
        "pkg:npm/syntax-error@1.1.2",
        "pkg:npm/through2@1.1.1",
        "pkg:npm/timers-browserify@1.4.0",
        "pkg:npm/tty-browserify@0.0.0",
        "pkg:npm/umd@2.1.0",
        "pkg:npm/url@0.10.3",
        "pkg:npm/util@0.10.3",
        "pkg:npm/vm-browserify@0.0.4",
        "pkg:npm/xtend@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/es6-shim@0.9.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-readlink@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.7.1",
      "dependsOn": [
        "pkg:npm/graceful-readlink@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/weak-map@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/collections@0.2.2",
      "dependsOn": [
        "pkg:npm/weak-map@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime@1.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimeparse@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@0.9.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url2@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q-io@1.10.9",
      "dependsOn": [
        "pkg:npm/collections@0.2.2",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/mimeparse@0.1.4",
        "pkg:npm/q@0.9.7",
        "pkg:npm/qs@0.1.0",
        "pkg:npm/url2@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/semver@4.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/traceur@0.0.33?vcs_url=git+ssh://git@github.com/vojtajina/traceur-compiler.git#d90b1e34c799bf61cd1aafdc33db0a554fa9e617",
      "dependsOn": [
        "pkg:npm/commander@2.7.1",
        "pkg:npm/q-io@1.10.9",
        "pkg:npm/semver@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/di@2.0.0-pre-9",
      "dependsOn": [
        "pkg:npm/es6-shim@0.9.3"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.0.10",
      "dependsOn": [
        "pkg:npm/mime-db@1.8.0"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.2.5",
      "dependsOn": [
        "pkg:npm/mime-types@2.0.10",
        "pkg:npm/negotiator@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.1.3",
      "dependsOn": [
        "pkg:npm/ms@0.7.0"
      ]
    },
    {
      "ref": "pkg:npm/depd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/crc@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.5.1",
      "dependsOn": [
        "pkg:npm/crc@3.2.1"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.2.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/finalhandler@0.3.4",
      "dependsOn": [
        "pkg:npm/debug@2.1.3",
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/on-finished@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@0.1.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@1.0.7",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.0",
        "pkg:npm/ipaddr.js@0.1.9"
      ]
    },
    {
      "ref": "pkg:npm/qs@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/range-parser@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.12.2",
      "dependsOn": [
        "pkg:npm/debug@2.1.3",
        "pkg:npm/depd@1.0.0",
        "pkg:npm/destroy@1.0.3",
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/etag@1.5.1",
        "pkg:npm/fresh@0.2.4",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/ms@0.7.0",
        "pkg:npm/on-finished@2.2.0",
        "pkg:npm/range-parser@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-static@1.9.2",
      "dependsOn": [
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/parseurl@1.3.0",
        "pkg:npm/send@0.12.2",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.1",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.0.10"
      ]
    },
    {
      "ref": "pkg:npm/vary@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.12.3",
      "dependsOn": [
        "pkg:npm/accepts@1.2.5",
        "pkg:npm/content-disposition@0.5.0",
        "pkg:npm/content-type@1.0.1",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.2",
        "pkg:npm/debug@2.1.3",
        "pkg:npm/depd@1.0.0",
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/etag@1.5.1",
        "pkg:npm/finalhandler@0.3.4",
        "pkg:npm/fresh@0.2.4",
        "pkg:npm/merge-descriptors@1.0.0",
        "pkg:npm/methods@1.1.1",
        "pkg:npm/on-finished@2.2.0",
        "pkg:npm/parseurl@1.3.0",
        "pkg:npm/path-to-regexp@0.1.3",
        "pkg:npm/proxy-addr@1.0.7",
        "pkg:npm/qs@2.4.1",
        "pkg:npm/range-parser@1.0.2",
        "pkg:npm/send@0.12.2",
        "pkg:npm/serve-static@1.9.2",
        "pkg:npm/type-is@1.6.1",
        "pkg:npm/utils-merge@1.0.0",
        "pkg:npm/vary@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.0",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.3.2",
      "dependsOn": [
        "pkg:npm/glob@4.5.3"
      ]
    },
    {
      "ref": "pkg:npm/rx@2.3.25",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.8.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/angular-benchpress@0.2.2",
      "dependsOn": [
        "pkg:npm/bootstrap@3.3.4",
        "pkg:npm/browserify@7.0.3",
        "pkg:npm/di@2.0.0-pre-9",
        "pkg:npm/express@4.12.3",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/rimraf@2.3.2",
        "pkg:npm/rx@2.3.25",
        "pkg:npm/underscore@1.8.3"
      ]
    },
    {
      "ref": "pkg:npm/benchmark@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/abbrev@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/archy@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mout@0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.10",
        "pkg:npm/wordwrap@0.0.2",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/osenv@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bower-config@0.5.2",
      "dependsOn": [
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/mout@0.9.1",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/osenv@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/bower-endpoint-parser@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-extend@0.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/intersect@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bower-json@0.4.0",
      "dependsOn": [
        "pkg:npm/deep-extend@0.2.11",
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/intersect@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/bower-logger@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bl@0.9.4",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/caseless@0.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@0.0.7",
      "dependsOn": [
        "pkg:npm/delayed-stream@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/forever-agent@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@0.2.0",
      "dependsOn": [
        "pkg:npm/async@0.9.0",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime-types@2.0.10"
      ]
    },
    {
      "ref": "pkg:npm/hoek@0.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@0.4.2",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@0.2.2",
      "dependsOn": [
        "pkg:npm/boom@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/sntp@0.2.4",
      "dependsOn": [
        "pkg:npm/hoek@0.9.1"
      ]
    },
    {
      "ref": "pkg:npm/hawk@1.1.1",
      "dependsOn": [
        "pkg:npm/boom@0.4.2",
        "pkg:npm/cryptiles@0.2.2",
        "pkg:npm/hoek@0.9.1",
        "pkg:npm/sntp@0.2.4"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-plus@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ctype@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-signature@0.10.1",
      "dependsOn": [
        "pkg:npm/asn1@0.1.11",
        "pkg:npm/assert-plus@0.1.5",
        "pkg:npm/ctype@0.5.3"
      ]
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-uuid@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@2.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringstream@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@0.12.1",
      "dependsOn": [
        "pkg:npm/punycode@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.51.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/bl@0.9.4",
        "pkg:npm/caseless@0.8.0",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.2.0",
        "pkg:npm/hawk@1.1.1",
        "pkg:npm/http-signature@0.10.1",
        "pkg:npm/json-stringify-safe@5.0.0",
        "pkg:npm/mime-types@1.0.2",
        "pkg:npm/node-uuid@1.4.3",
        "pkg:npm/oauth-sign@0.5.0",
        "pkg:npm/qs@2.3.3",
        "pkg:npm/stringstream@0.0.4",
        "pkg:npm/tough-cookie@0.12.1",
        "pkg:npm/tunnel-agent@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/retry@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request-replay@0.2.0",
      "dependsOn": [
        "pkg:npm/retry@0.6.0"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bower-registry-client@0.2.4",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/bower-config@0.5.2",
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/lru-cache@2.3.1",
        "pkg:npm/mkdirp@0.3.5",
        "pkg:npm/request-replay@0.2.0",
        "pkg:npm/request@2.51.0",
        "pkg:npm/rimraf@2.2.8"
      ]
    },
    {
      "ref": "pkg:npm/esprima@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/redeyed@0.4.4",
      "dependsOn": [
        "pkg:npm/esprima@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/cardinal@0.4.0",
      "dependsOn": [
        "pkg:npm/redeyed@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@0.1.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@0.3.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@0.5.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@1.1.0",
        "pkg:npm/escape-string-regexp@1.0.3",
        "pkg:npm/has-ansi@0.1.0",
        "pkg:npm/strip-ansi@0.3.0",
        "pkg:npm/supports-color@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/chmodr@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffers@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/traverse@0.3.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chainsaw@0.1.0",
      "dependsOn": [
        "pkg:npm/traverse@0.3.9"
      ]
    },
    {
      "ref": "pkg:npm/binary@0.3.0",
      "dependsOn": [
        "pkg:npm/buffers@0.1.1",
        "pkg:npm/chainsaw@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@3.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkpath@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nopt@2.2.1",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/q@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nopt@1.0.10",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/touch@0.0.2",
      "dependsOn": [
        "pkg:npm/nopt@1.0.10"
      ]
    },
    {
      "ref": "pkg:npm/decompress-zip@0.0.8",
      "dependsOn": [
        "pkg:npm/binary@0.3.0",
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/mkpath@0.1.0",
        "pkg:npm/nopt@2.2.1",
        "pkg:npm/q@1.0.1",
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/touch@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/fstream@1.0.4",
      "dependsOn": [
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/rimraf@2.2.8"
      ]
    },
    {
      "ref": "pkg:npm/fstream-ignore@1.0.2",
      "dependsOn": [
        "pkg:npm/fstream@1.0.4",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@1.0.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.5.0",
        "pkg:npm/sigmund@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.0.6",
      "dependsOn": [
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@1.0.0",
        "pkg:npm/once@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.3.6",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/handlebars@2.0.0",
      "dependsOn": [
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/uglify-js@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@2.0.1",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.6"
      ]
    },
    {
      "ref": "pkg:npm/es6-iterator@0.1.3",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.6",
        "pkg:npm/es6-symbol@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es5-ext@0.10.6",
      "dependsOn": [
        "pkg:npm/es6-iterator@0.1.3",
        "pkg:npm/es6-symbol@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/d@0.1.1",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.6"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@0.1.1",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.6"
      ]
    },
    {
      "ref": "pkg:npm/es6-weak-map@0.1.2",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.6",
        "pkg:npm/es6-iterator@0.1.3",
        "pkg:npm/es6-symbol@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter@0.3.3",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.6"
      ]
    },
    {
      "ref": "pkg:npm/lru-queue@0.1.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.6"
      ]
    },
    {
      "ref": "pkg:npm/next-tick@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timers-ext@0.1.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.6",
        "pkg:npm/next-tick@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/memoizee@0.3.8",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.6",
        "pkg:npm/es6-weak-map@0.1.2",
        "pkg:npm/event-emitter@0.3.3",
        "pkg:npm/lru-queue@0.1.0",
        "pkg:npm/next-tick@0.2.2",
        "pkg:npm/timers-ext@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-color@0.3.3",
      "dependsOn": [
        "pkg:npm/d@0.1.1",
        "pkg:npm/es5-ext@0.10.6",
        "pkg:npm/memoizee@0.3.8",
        "pkg:npm/timers-ext@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/figures@1.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@2.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/readline2@0.1.1",
      "dependsOn": [
        "pkg:npm/mute-stream@0.0.4",
        "pkg:npm/strip-ansi@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rx@2.4.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inquirer@0.7.1",
      "dependsOn": [
        "pkg:npm/chalk@0.5.0",
        "pkg:npm/cli-color@0.3.3",
        "pkg:npm/figures@1.3.5",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/mute-stream@0.0.4",
        "pkg:npm/readline2@0.1.1",
        "pkg:npm/rx@2.4.9",
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/chalk@0.5.1",
      "dependsOn": [
        "pkg:npm/ansi-styles@1.1.0",
        "pkg:npm/escape-string-regexp@1.0.3",
        "pkg:npm/has-ansi@0.1.0",
        "pkg:npm/strip-ansi@0.3.0",
        "pkg:npm/supports-color@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash@3.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.2",
      "dependsOn": [
        "pkg:npm/lodash@3.6.0",
        "pkg:npm/sprintf-js@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/esprima@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.2.7",
      "dependsOn": [
        "pkg:npm/argparse@1.0.2",
        "pkg:npm/esprima@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/osenv@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/user-home@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uuid@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xdg-basedir@1.0.1",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/configstore@0.3.2",
      "dependsOn": [
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/js-yaml@3.2.7",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/object-assign@2.0.0",
        "pkg:npm/osenv@0.1.0",
        "pkg:npm/user-home@1.1.1",
        "pkg:npm/uuid@2.0.1",
        "pkg:npm/xdg-basedir@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inquirer@0.6.0",
      "dependsOn": [
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/cli-color@0.3.3",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/mute-stream@0.0.4",
        "pkg:npm/readline2@0.1.1",
        "pkg:npm/rx@2.4.9",
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/lodash.isfunction@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._objecttypes@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isobject@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._isnative@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.now@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.debounce@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash.isfunction@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1",
        "pkg:npm/lodash.now@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/osx-release@1.0.0",
      "dependsOn": [
        "pkg:npm/minimist@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/win-release@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-name@1.0.3",
      "dependsOn": [
        "pkg:npm/osx-release@1.0.0",
        "pkg:npm/win-release@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/caseless@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@0.1.4",
      "dependsOn": [
        "pkg:npm/async@0.9.0",
        "pkg:npm/async@0.9.2",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/oauth-sign@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.42.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/bl@0.9.4",
        "pkg:npm/caseless@0.6.0",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.1.4",
        "pkg:npm/hawk@1.1.1",
        "pkg:npm/http-signature@0.10.1",
        "pkg:npm/json-stringify-safe@5.0.0",
        "pkg:npm/mime-types@1.0.2",
        "pkg:npm/node-uuid@1.4.3",
        "pkg:npm/oauth-sign@0.4.0",
        "pkg:npm/qs@1.2.2",
        "pkg:npm/stringstream@0.0.4",
        "pkg:npm/tough-cookie@0.12.1",
        "pkg:npm/tunnel-agent@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/insight@0.4.3",
      "dependsOn": [
        "pkg:npm/async@0.9.0",
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/configstore@0.3.2",
        "pkg:npm/inquirer@0.6.0",
        "pkg:npm/lodash.debounce@2.4.1",
        "pkg:npm/object-assign@1.0.0",
        "pkg:npm/os-name@1.0.3",
        "pkg:npm/request@2.42.0",
        "pkg:npm/tough-cookie@0.12.1"
      ]
    },
    {
      "ref": "pkg:npm/is-root@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/junk@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lockfile@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nopt@3.0.1",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/opn@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-throttler@0.1.0",
      "dependsOn": [
        "pkg:npm/q@0.9.7"
      ]
    },
    {
      "ref": "pkg:npm/read@1.0.5",
      "dependsOn": [
        "pkg:npm/mute-stream@0.0.4"
      ]
    },
    {
      "ref": "pkg:npm/promptly@0.2.0",
      "dependsOn": [
        "pkg:npm/read@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/throttleit@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request-progress@0.3.0",
      "dependsOn": [
        "pkg:npm/throttleit@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/semver@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-filter@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-map@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-reduce@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shell-quote@1.4.3",
      "dependsOn": [
        "pkg:npm/array-filter@0.0.1",
        "pkg:npm/array-map@0.0.0",
        "pkg:npm/array-reduce@0.0.0",
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/stringify-object@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/end-of-stream@1.0.0",
      "dependsOn": [
        "pkg:npm/once@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/once@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pump@0.3.5",
      "dependsOn": [
        "pkg:npm/end-of-stream@1.0.0",
        "pkg:npm/once@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.1.0",
      "dependsOn": [
        "pkg:npm/once@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/tar-stream@0.4.7",
      "dependsOn": [
        "pkg:npm/bl@0.9.4",
        "pkg:npm/end-of-stream@1.1.0",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/xtend@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tar-fs@0.5.2",
      "dependsOn": [
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/pump@0.3.5",
        "pkg:npm/tar-stream@0.4.7"
      ]
    },
    {
      "ref": "pkg:npm/tmp@0.0.23",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/got@0.3.0",
      "dependsOn": [
        "pkg:npm/object-assign@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ini@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proto-list@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/config-chain@1.1.8",
      "dependsOn": [
        "pkg:npm/ini@1.3.3",
        "pkg:npm/proto-list@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/uid-number@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npmconf@2.1.1",
      "dependsOn": [
        "pkg:npm/config-chain@1.1.8",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/ini@1.3.3",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/nopt@3.0.1",
        "pkg:npm/once@1.3.1",
        "pkg:npm/osenv@0.1.0",
        "pkg:npm/semver@2.3.2",
        "pkg:npm/uid-number@0.0.5"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@0.1.1",
      "dependsOn": [
        "pkg:npm/npmconf@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/package-json@0.2.0",
      "dependsOn": [
        "pkg:npm/got@0.3.0",
        "pkg:npm/registry-url@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/latest-version@0.2.0",
      "dependsOn": [
        "pkg:npm/package-json@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/semver-diff@0.1.0",
      "dependsOn": [
        "pkg:npm/semver@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-regex@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@0.2.2",
      "dependsOn": [
        "pkg:npm/ansi-regex@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/string-length@0.1.2",
      "dependsOn": [
        "pkg:npm/strip-ansi@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/update-notifier@0.2.0",
      "dependsOn": [
        "pkg:npm/chalk@0.5.0",
        "pkg:npm/configstore@0.3.2",
        "pkg:npm/latest-version@0.2.0",
        "pkg:npm/semver-diff@0.1.0",
        "pkg:npm/string-length@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/which@1.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bower@1.3.12",
      "dependsOn": [
        "pkg:npm/abbrev@1.0.5",
        "pkg:npm/archy@0.0.2",
        "pkg:npm/bower-config@0.5.2",
        "pkg:npm/bower-endpoint-parser@0.2.2",
        "pkg:npm/bower-json@0.4.0",
        "pkg:npm/bower-logger@0.2.2",
        "pkg:npm/bower-registry-client@0.2.4",
        "pkg:npm/cardinal@0.4.0",
        "pkg:npm/chalk@0.5.0",
        "pkg:npm/chmodr@0.1.0",
        "pkg:npm/decompress-zip@0.0.8",
        "pkg:npm/fstream-ignore@1.0.2",
        "pkg:npm/fstream@1.0.4",
        "pkg:npm/glob@4.0.6",
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/handlebars@2.0.0",
        "pkg:npm/inquirer@0.7.1",
        "pkg:npm/insight@0.4.3",
        "pkg:npm/is-root@1.0.0",
        "pkg:npm/junk@1.0.1",
        "pkg:npm/lockfile@1.0.0",
        "pkg:npm/lru-cache@2.5.0",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/mout@0.9.1",
        "pkg:npm/nopt@3.0.1",
        "pkg:npm/opn@1.0.1",
        "pkg:npm/osenv@0.1.0",
        "pkg:npm/p-throttler@0.1.0",
        "pkg:npm/promptly@0.2.0",
        "pkg:npm/q@1.0.1",
        "pkg:npm/request-progress@0.3.0",
        "pkg:npm/request@2.42.0",
        "pkg:npm/retry@0.6.0",
        "pkg:npm/rimraf@2.2.8",
        "pkg:npm/semver@2.3.2",
        "pkg:npm/shell-quote@1.4.3",
        "pkg:npm/stringify-object@1.0.1",
        "pkg:npm/tar-fs@0.5.2",
        "pkg:npm/tmp@0.0.23",
        "pkg:npm/update-notifier@0.2.0",
        "pkg:npm/which@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/fstream@0.1.31",
      "dependsOn": [
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/rimraf@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/match-stream@0.0.2",
      "dependsOn": [
        "pkg:npm/buffers@0.1.1",
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/over@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setimmediate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slice-stream@1.0.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/pullstream@0.4.1",
      "dependsOn": [
        "pkg:npm/over@0.0.5",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/setimmediate@1.0.2",
        "pkg:npm/slice-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/unzip@0.1.11",
      "dependsOn": [
        "pkg:npm/binary@0.3.0",
        "pkg:npm/fstream@0.1.31",
        "pkg:npm/match-stream@0.0.2",
        "pkg:npm/pullstream@0.4.1",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/setimmediate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/browserstacktunnel-wrapper@1.3.1",
      "dependsOn": [
        "pkg:npm/unzip@0.1.11"
      ]
    },
    {
      "ref": "pkg:npm/canonical-path@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/CSSwhat@0.4.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domutils@1.4.3",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/CSSselect@0.4.1",
      "dependsOn": [
        "pkg:npm/CSSwhat@0.4.7",
        "pkg:npm/domutils@1.4.3"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.0.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/entities@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.2.1",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.5.1",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.0.1",
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/entities@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/htmlparser2@3.7.3",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.2.1",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/entities@1.0.0",
        "pkg:npm/readable-stream@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/cheerio@0.17.0",
      "dependsOn": [
        "pkg:npm/CSSselect@0.4.1",
        "pkg:npm/dom-serializer@0.0.1",
        "pkg:npm/entities@1.1.1",
        "pkg:npm/htmlparser2@3.7.3",
        "pkg:npm/lodash@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dependency-graph@0.1.0",
      "dependsOn": [
        "pkg:npm/underscore@1.4.4"
      ]
    },
    {
      "ref": "pkg:npm/di@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate.js@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colors@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cycle@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eyes@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkginfo@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-jar@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@0.0.10",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/combined-stream@0.0.7",
        "pkg:npm/mime@1.2.11"
      ]
    },
    {
      "ref": "pkg:npm/hoek@0.7.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@0.3.8",
      "dependsOn": [
        "pkg:npm/hoek@0.7.6"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@0.1.3",
      "dependsOn": [
        "pkg:npm/boom@0.3.8"
      ]
    },
    {
      "ref": "pkg:npm/sntp@0.1.4",
      "dependsOn": [
        "pkg:npm/hoek@0.7.6"
      ]
    },
    {
      "ref": "pkg:npm/hawk@0.10.2",
      "dependsOn": [
        "pkg:npm/boom@0.3.8",
        "pkg:npm/cryptiles@0.1.3",
        "pkg:npm/hoek@0.7.6",
        "pkg:npm/sntp@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/json-stringify-safe@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.5.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.16.6",
      "dependsOn": [
        "pkg:npm/aws-sign@0.2.0",
        "pkg:npm/cookie-jar@0.2.0",
        "pkg:npm/forever-agent@0.2.0",
        "pkg:npm/form-data@0.0.10",
        "pkg:npm/hawk@0.10.2",
        "pkg:npm/json-stringify-safe@3.0.0",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/node-uuid@1.4.3",
        "pkg:npm/oauth-sign@0.2.0",
        "pkg:npm/qs@0.5.6",
        "pkg:npm/tunnel-agent@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/stack-trace@0.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/winston@0.7.3",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/colors@0.6.2",
        "pkg:npm/cycle@1.0.3",
        "pkg:npm/eyes@0.1.8",
        "pkg:npm/pkginfo@0.3.0",
        "pkg:npm/request@2.16.6",
        "pkg:npm/stack-trace@0.0.9"
      ]
    },
    {
      "ref": "pkg:npm/dgeni@0.4.1",
      "dependsOn": [
        "pkg:npm/canonical-path@0.0.2",
        "pkg:npm/dependency-graph@0.1.0",
        "pkg:npm/di@0.0.1",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/q@0.9.7",
        "pkg:npm/validate.js@0.2.0",
        "pkg:npm/winston@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/underscore@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore-contrib@0.3.0",
      "dependsOn": [
        "pkg:npm/underscore@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/catharsis@0.8.7",
      "dependsOn": [
        "pkg:npm/underscore-contrib@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/lower-case@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sentence-case@1.1.2",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/upper-case@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camel-case@1.1.2",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.2",
        "pkg:npm/upper-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/snake-case@1.1.1",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/constant-case@1.1.1",
      "dependsOn": [
        "pkg:npm/snake-case@1.1.1",
        "pkg:npm/upper-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/dot-case@1.1.1",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-lower-case@1.1.1",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-upper-case@1.1.1",
      "dependsOn": [
        "pkg:npm/upper-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/lower-case-first@1.0.0",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/param-case@1.1.1",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/upper-case-first@1.1.1",
      "dependsOn": [
        "pkg:npm/upper-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/pascal-case@1.1.1",
      "dependsOn": [
        "pkg:npm/camel-case@1.1.2",
        "pkg:npm/upper-case-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/path-case@1.1.1",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/swap-case@1.1.1",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.2",
        "pkg:npm/upper-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/title-case@1.1.1",
      "dependsOn": [
        "pkg:npm/sentence-case@1.1.2",
        "pkg:npm/upper-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/change-case@2.3.0",
      "dependsOn": [
        "pkg:npm/camel-case@1.1.2",
        "pkg:npm/constant-case@1.1.1",
        "pkg:npm/dot-case@1.1.1",
        "pkg:npm/is-lower-case@1.1.1",
        "pkg:npm/is-upper-case@1.1.1",
        "pkg:npm/lower-case-first@1.0.0",
        "pkg:npm/lower-case@1.1.2",
        "pkg:npm/param-case@1.1.1",
        "pkg:npm/pascal-case@1.1.1",
        "pkg:npm/path-case@1.1.1",
        "pkg:npm/sentence-case@1.1.2",
        "pkg:npm/snake-case@1.1.1",
        "pkg:npm/swap-case@1.1.1",
        "pkg:npm/title-case@1.1.1",
        "pkg:npm/upper-case-first@1.1.1",
        "pkg:npm/upper-case@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.6.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.3.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.5.0",
        "pkg:npm/lru-cache@2.6.4",
        "pkg:npm/lru-cache@2.6.5",
        "pkg:npm/sigmund@1.0.0",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.2.11",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.3.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/dom-serializer@0.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/entities@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.8.3",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.3.0",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/entities@1.0.0",
        "pkg:npm/readable-stream@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/marked@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-html-encoder@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async-each@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.14",
      "dependsOn": [
        "pkg:npm/lru-cache@2.5.0",
        "pkg:npm/lru-cache@2.6.5",
        "pkg:npm/sigmund@1.0.0",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/readdirp@1.3.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/minimatch@0.2.14",
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/nan@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fsevents@0.3.8",
      "dependsOn": [
        "pkg:npm/nan@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@0.12.6",
      "dependsOn": [
        "pkg:npm/async-each@0.1.6",
        "pkg:npm/fsevents@0.3.5",
        "pkg:npm/fsevents@0.3.8",
        "pkg:npm/readdirp@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/nunjucks@1.3.4",
      "dependsOn": [
        "pkg:npm/chokidar@0.12.6",
        "pkg:npm/optimist@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/semver@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shelljs@0.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringmap@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dgeni-packages@0.10.19",
      "dependsOn": [
        "pkg:npm/canonical-path@0.0.2",
        "pkg:npm/catharsis@0.8.7",
        "pkg:npm/change-case@2.3.0",
        "pkg:npm/dgeni@0.4.1",
        "pkg:npm/esprima@1.2.5",
        "pkg:npm/estraverse@1.9.3",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/htmlparser2@3.8.3",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/marked@0.3.3",
        "pkg:npm/minimatch@0.3.0",
        "pkg:npm/node-html-encoder@0.0.2",
        "pkg:npm/nunjucks@1.3.4",
        "pkg:npm/q-io@1.10.9",
        "pkg:npm/q@1.0.1",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/shelljs@0.5.3",
        "pkg:npm/stringmap@0.2.2",
        "pkg:npm/winston@0.7.3"
      ]
    },
    {
      "ref": "pkg:npm/duplexer@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/from@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-stream@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pause-stream@0.0.11",
      "dependsOn": [
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/split@0.2.10",
      "dependsOn": [
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner@0.0.4",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/event-stream@3.1.7",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1",
        "pkg:npm/from@0.1.3",
        "pkg:npm/map-stream@0.1.0",
        "pkg:npm/pause-stream@0.0.11",
        "pkg:npm/split@0.2.10",
        "pkg:npm/stream-combiner@0.0.4",
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/async@0.1.22",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/coffee-script@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dateformat@1.0.2-1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eventemitter2@0.4.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/exit@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/findup-sync@0.1.3",
      "dependsOn": [
        "pkg:npm/glob@3.2.11",
        "pkg:npm/lodash@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/getobject@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@1.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@3.1.21",
      "dependsOn": [
        "pkg:npm/graceful-fs@1.2.3",
        "pkg:npm/inherits@1.0.0",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/hooker@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore.string@2.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/grunt-legacy-log@0.1.1",
      "dependsOn": [
        "pkg:npm/colors@0.6.2",
        "pkg:npm/hooker@0.2.3",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/underscore.string@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore.string@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/grunt-legacy-util@0.2.0",
      "dependsOn": [
        "pkg:npm/async@0.1.22",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/getobject@0.1.0",
        "pkg:npm/hooker@0.2.3",
        "pkg:npm/lodash@0.9.2",
        "pkg:npm/underscore.string@2.2.1",
        "pkg:npm/which@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/iconv-lite@0.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore.string@2.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@0.1.16",
      "dependsOn": [
        "pkg:npm/underscore.string@2.4.0",
        "pkg:npm/underscore@1.7.0"
      ]
    },
    {
      "ref": "pkg:npm/js-yaml@2.0.5",
      "dependsOn": [
        "pkg:npm/argparse@0.1.16",
        "pkg:npm/esprima@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/grunt@0.4.5",
      "dependsOn": [
        "pkg:npm/async@0.1.22",
        "pkg:npm/coffee-script@1.3.3",
        "pkg:npm/colors@0.6.2",
        "pkg:npm/dateformat@1.0.2-1.2.3",
        "pkg:npm/eventemitter2@0.4.14",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/findup-sync@0.1.3",
        "pkg:npm/getobject@0.1.0",
        "pkg:npm/glob@3.1.21",
        "pkg:npm/grunt-legacy-log@0.1.1",
        "pkg:npm/grunt-legacy-util@0.2.0",
        "pkg:npm/hooker@0.2.3",
        "pkg:npm/iconv-lite@0.2.11",
        "pkg:npm/js-yaml@2.0.5",
        "pkg:npm/lodash@0.9.2",
        "pkg:npm/minimatch@0.2.14",
        "pkg:npm/nopt@1.0.10",
        "pkg:npm/rimraf@2.2.8",
        "pkg:npm/underscore.string@2.2.1",
        "pkg:npm/which@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/grunt-bump@0.0.17",
      "dependsOn": [
        "pkg:npm/grunt@0.4.5",
        "pkg:npm/semver@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/grunt-contrib-clean@0.6.0",
      "dependsOn": [
        "pkg:npm/grunt@0.4.5",
        "pkg:npm/rimraf@2.2.8"
      ]
    },
    {
      "ref": "pkg:npm/buffer-crc32@0.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lazystream@0.1.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/crc32-stream@0.3.3",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.5",
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/compress-commons@0.1.6",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.5",
        "pkg:npm/crc32-stream@0.3.3",
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/zip-stream@0.4.1",
      "dependsOn": [
        "pkg:npm/compress-commons@0.1.6",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/archiver@0.11.0",
      "dependsOn": [
        "pkg:npm/async@0.9.0",
        "pkg:npm/buffer-crc32@0.2.5",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/lazystream@0.1.0",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/tar-stream@0.4.7",
        "pkg:npm/zip-stream@0.4.1"
      ]
    },
    {
      "ref": "pkg:npm/prettysize@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/grunt-contrib-compress@0.12.0",
      "dependsOn": [
        "pkg:npm/archiver@0.11.0",
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/grunt@0.4.5",
        "pkg:npm/prettysize@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/basic-auth-connect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@0.6.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@1.1.6",
      "dependsOn": [
        "pkg:npm/bytes@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mime-types@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.2.1",
      "dependsOn": [
        "pkg:npm/mime-types@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.3.1",
      "dependsOn": [
        "pkg:npm/bytes@1.0.0",
        "pkg:npm/qs@0.6.6",
        "pkg:npm/raw-body@1.1.6",
        "pkg:npm/type-is@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.4.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.0.3",
      "dependsOn": [
        "pkg:npm/mime@1.2.11",
        "pkg:npm/negotiator@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/compressible@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-headers@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.0.7",
      "dependsOn": [
        "pkg:npm/accepts@1.0.3",
        "pkg:npm/bytes@1.0.0",
        "pkg:npm/compressible@1.1.0",
        "pkg:npm/on-headers@0.0.0",
        "pkg:npm/vary@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect-timeout@1.1.0",
      "dependsOn": [
        "pkg:npm/debug@0.8.1"
      ]
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-parser@1.1.0",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.3",
        "pkg:npm/cookie@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/rndm@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/scmp@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uid2@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/csrf-tokens@1.0.4",
      "dependsOn": [
        "pkg:npm/rndm@1.1.0",
        "pkg:npm/scmp@0.0.3",
        "pkg:npm/uid2@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/csurf@1.2.1",
      "dependsOn": [
        "pkg:npm/csrf-tokens@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/ms@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@1.0.2",
      "dependsOn": [
        "pkg:npm/ms@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/errorhandler@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-crc32@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express-session@1.2.1",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.1",
        "pkg:npm/cookie-signature@1.0.3",
        "pkg:npm/cookie@0.1.2",
        "pkg:npm/debug@0.8.1",
        "pkg:npm/on-headers@0.0.0",
        "pkg:npm/uid2@0.0.3",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/method-override@2.0.2",
      "dependsOn": [
        "pkg:npm/methods@1.0.1",
        "pkg:npm/parseurl@1.0.1",
        "pkg:npm/vary@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/morgan@1.1.1",
      "dependsOn": [
        "pkg:npm/bytes@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/stream-counter@0.2.0",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/multiparty@3.2.8",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/stream-counter@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/pause@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/response-time@2.0.0",
      "dependsOn": [
        "pkg:npm/on-headers@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/serve-favicon@2.0.1",
      "dependsOn": [
        "pkg:npm/fresh@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/batch@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-index@1.1.1",
      "dependsOn": [
        "pkg:npm/accepts@1.0.3",
        "pkg:npm/batch@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finished@1.2.2",
      "dependsOn": [
        "pkg:npm/ee-first@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/send@0.4.3",
      "dependsOn": [
        "pkg:npm/debug@1.0.2",
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/finished@1.2.2",
        "pkg:npm/fresh@0.2.2",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/range-parser@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.2.3",
      "dependsOn": [
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/parseurl@1.0.1",
        "pkg:npm/send@0.4.3"
      ]
    },
    {
      "ref": "pkg:npm/vhost@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@2.19.6",
      "dependsOn": [
        "pkg:npm/basic-auth-connect@1.0.0",
        "pkg:npm/body-parser@1.3.1",
        "pkg:npm/bytes@1.0.0",
        "pkg:npm/compression@1.0.7",
        "pkg:npm/connect-timeout@1.1.0",
        "pkg:npm/cookie-parser@1.1.0",
        "pkg:npm/cookie-signature@1.0.3",
        "pkg:npm/cookie@0.1.2",
        "pkg:npm/csurf@1.2.1",
        "pkg:npm/debug@1.0.2",
        "pkg:npm/errorhandler@1.0.2",
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/express-session@1.2.1",
        "pkg:npm/fresh@0.2.2",
        "pkg:npm/method-override@2.0.2",
        "pkg:npm/morgan@1.1.1",
        "pkg:npm/multiparty@3.2.8",
        "pkg:npm/on-headers@0.0.0",
        "pkg:npm/parseurl@1.0.1",
        "pkg:npm/pause@0.0.1",
        "pkg:npm/qs@0.6.6",
        "pkg:npm/response-time@2.0.0",
        "pkg:npm/serve-favicon@2.0.1",
        "pkg:npm/serve-index@1.1.1",
        "pkg:npm/serve-static@1.2.3",
        "pkg:npm/type-is@1.2.1",
        "pkg:npm/vhost@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/connect-livereload@0.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/open@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.1.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/portscanner@0.2.3",
      "dependsOn": [
        "pkg:npm/async@0.1.15"
      ]
    },
    {
      "ref": "pkg:npm/grunt-contrib-connect@0.8.0",
      "dependsOn": [
        "pkg:npm/async@0.9.0",
        "pkg:npm/connect-livereload@0.4.1",
        "pkg:npm/connect@2.19.6",
        "pkg:npm/grunt@0.4.5",
        "pkg:npm/open@0.0.5",
        "pkg:npm/portscanner@0.2.3"
      ]
    },
    {
      "ref": "pkg:npm/grunt-contrib-copy@0.6.0",
      "dependsOn": [
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/grunt@0.4.5"
      ]
    },
    {
      "ref": "pkg:npm/cli@0.6.6",
      "dependsOn": [
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@3.2.11"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.8.2",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.3.0",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/entities@1.0.0",
        "pkg:npm/readable-stream@1.1.13"
      ]
    },
    {
      "ref": "pkg:npm/shelljs@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jshint@2.5.11",
      "dependsOn": [
        "pkg:npm/cli@0.6.6",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/htmlparser2@3.8.2",
        "pkg:npm/minimatch@1.0.0",
        "pkg:npm/shelljs@0.3.0",
        "pkg:npm/strip-json-comments@1.0.2",
        "pkg:npm/underscore@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/grunt-contrib-jshint@0.10.0",
      "dependsOn": [
        "pkg:npm/grunt@0.4.5",
        "pkg:npm/hooker@0.2.3",
        "pkg:npm/jshint@2.5.11"
      ]
    },
    {
      "ref": "pkg:npm/bluebird@2.9.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/win-spawn@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/grunt-ddescribe-iit@0.0.6",
      "dependsOn": [
        "pkg:npm/bluebird@2.9.24",
        "pkg:npm/win-spawn@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/coffee-script@1.9.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fileset@0.1.5",
      "dependsOn": [
        "pkg:npm/glob@3.2.11",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/gaze@0.3.4",
      "dependsOn": [
        "pkg:npm/fileset@0.1.5",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine-growl-reporter@0.0.3",
      "dependsOn": [
        "pkg:npm/growl@1.7.0"
      ]
    },
    {
      "ref": "pkg:npm/jasmine-reporters@1.0.1",
      "dependsOn": [
        "pkg:npm/mkdirp@0.3.5"
      ]
    },
    {
      "ref": "pkg:npm/requirejs@2.1.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/walkdir@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine-node@1.14.5",
      "dependsOn": [
        "pkg:npm/coffee-script@1.9.1",
        "pkg:npm/gaze@0.3.4",
        "pkg:npm/jasmine-growl-reporter@0.0.3",
        "pkg:npm/jasmine-reporters@1.0.1",
        "pkg:npm/mkdirp@0.3.5",
        "pkg:npm/requirejs@2.1.17",
        "pkg:npm/underscore@1.8.3",
        "pkg:npm/walkdir@0.0.7"
      ]
    },
    {
      "ref": "pkg:npm/grunt-jasmine-node@0.1.0?vcs_url=git+ssh://git@github.com/vojtajina/grunt-jasmine-node.git#ced17cbe52c1412b2ada53160432a5b681f37cd7",
      "dependsOn": [
        "pkg:npm/jasmine-node@1.14.5"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima-harmony-jscs@1.1.0-regex-token-fix",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vow@0.4.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vow-queue@0.4.1",
      "dependsOn": [
        "pkg:npm/vow@0.4.9"
      ]
    },
    {
      "ref": "pkg:npm/vow-fs@0.3.4",
      "dependsOn": [
        "pkg:npm/glob@4.5.3",
        "pkg:npm/node-uuid@1.4.3",
        "pkg:npm/vow-queue@0.4.1",
        "pkg:npm/vow@0.4.9"
      ]
    },
    {
      "ref": "pkg:npm/lodash-node@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@2.4.6",
      "dependsOn": [
        "pkg:npm/lodash-node@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/jscs@1.10.0",
      "dependsOn": [
        "pkg:npm/colors@1.0.3",
        "pkg:npm/commander@2.5.1",
        "pkg:npm/esprima-harmony-jscs@1.1.0-regex-token-fix",
        "pkg:npm/esprima@1.2.5",
        "pkg:npm/estraverse@1.9.3",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@4.0.6",
        "pkg:npm/minimatch@2.0.4",
        "pkg:npm/strip-json-comments@1.0.2",
        "pkg:npm/supports-color@1.2.1",
        "pkg:npm/vow-fs@0.3.4",
        "pkg:npm/vow@0.4.9",
        "pkg:npm/xmlbuilder@2.4.6"
      ]
    },
    {
      "ref": "pkg:npm/grunt-jscs@1.2.0",
      "dependsOn": [
        "pkg:npm/grunt@0.4.5",
        "pkg:npm/hooker@0.2.3",
        "pkg:npm/jscs@1.10.0",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/vow@0.4.9"
      ]
    },
    {
      "ref": "pkg:npm/grunt-merge-conflict@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-styles@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@1.0.3",
      "dependsOn": [
        "pkg:npm/ansi-regex@1.1.1",
        "pkg:npm/get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.0.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.0.1",
        "pkg:npm/escape-string-regexp@1.0.3",
        "pkg:npm/has-ansi@1.0.3",
        "pkg:npm/strip-ansi@2.0.1",
        "pkg:npm/supports-color@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/grunt-shell@1.1.2",
      "dependsOn": [
        "pkg:npm/chalk@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/archy@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deprecated@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-differ@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/beeper@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-obj@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase-keys@1.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.0.2",
        "pkg:npm/map-obj@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-finite@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeating@1.1.2",
      "dependsOn": [
        "pkg:npm/is-finite@1.0.0",
        "pkg:npm/meow@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/indent-string@1.2.1",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/repeating@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/meow@3.1.0",
      "dependsOn": [
        "pkg:npm/camelcase-keys@1.0.0",
        "pkg:npm/indent-string@1.2.1",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/object-assign@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dateformat@1.0.11",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1",
        "pkg:npm/meow@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash._reescape@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reevaluate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basecopy@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basetostring@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._basevalues@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._isiterateecall@3.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.escape@3.0.0",
      "dependsOn": [
        "pkg:npm/lodash._basetostring@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.isarguments@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isarray@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.isnative@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.keys@3.0.5",
      "dependsOn": [
        "pkg:npm/lodash.isarguments@3.0.1",
        "pkg:npm/lodash.isarray@3.0.1",
        "pkg:npm/lodash.isnative@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.restparam@3.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.templatesettings@3.1.0",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.template@3.4.0",
      "dependsOn": [
        "pkg:npm/lodash._basecopy@3.0.0",
        "pkg:npm/lodash._basetostring@3.0.0",
        "pkg:npm/lodash._basevalues@3.0.0",
        "pkg:npm/lodash._isiterateecall@3.0.5",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.escape@3.0.0",
        "pkg:npm/lodash.keys@3.0.5",
        "pkg:npm/lodash.restparam@3.6.0",
        "pkg:npm/lodash.templatesettings@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/multipipe@0.1.2",
      "dependsOn": [
        "pkg:npm/duplexer2@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/replace-ext@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@0.6.3",
      "dependsOn": [
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/xtend@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/clone@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clone-stats@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vinyl@0.4.6",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1",
        "pkg:npm/clone@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp-util@3.0.4",
      "dependsOn": [
        "pkg:npm/array-differ@1.0.0",
        "pkg:npm/array-uniq@1.0.2",
        "pkg:npm/beeper@1.0.0",
        "pkg:npm/chalk@1.0.0",
        "pkg:npm/dateformat@1.0.11",
        "pkg:npm/lodash._reescape@3.0.0",
        "pkg:npm/lodash._reevaluate@3.0.0",
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.template@3.4.0",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/multipipe@0.1.2",
        "pkg:npm/object-assign@2.0.0",
        "pkg:npm/replace-ext@0.0.1",
        "pkg:npm/through2@0.6.3",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/interpret@0.3.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extend@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@4.3.5",
      "dependsOn": [
        "pkg:npm/inflight@1.0.4",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@2.0.4",
        "pkg:npm/once@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/findup-sync@0.2.1",
      "dependsOn": [
        "pkg:npm/glob@4.3.5"
      ]
    },
    {
      "ref": "pkg:npm/flagged-respawn@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/liftoff@2.0.3",
      "dependsOn": [
        "pkg:npm/extend@2.0.0",
        "pkg:npm/findup-sync@0.2.1",
        "pkg:npm/flagged-respawn@0.3.1",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/resolve@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@0.1.5",
      "dependsOn": [
        "pkg:npm/once@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/sequencify@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-consume@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/orchestrator@0.3.7",
      "dependsOn": [
        "pkg:npm/end-of-stream@0.1.5",
        "pkg:npm/sequencify@0.0.7",
        "pkg:npm/stream-consume@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-hrtime@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@4.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tildify@1.0.0",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/v8flags@2.0.3",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/clone@0.1.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/defaults@1.0.2",
      "dependsOn": [
        "pkg:npm/clone@0.1.19"
      ]
    },
    {
      "ref": "pkg:npm/find-index@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob2base@0.0.12",
      "dependsOn": [
        "pkg:npm/find-index@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ordered-read-streams@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unique-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob-stream@3.1.18",
      "dependsOn": [
        "pkg:npm/glob2base@0.0.12",
        "pkg:npm/glob@4.5.3",
        "pkg:npm/minimatch@2.0.4",
        "pkg:npm/ordered-read-streams@0.1.0",
        "pkg:npm/through2@0.6.3",
        "pkg:npm/unique-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globule@0.1.0",
      "dependsOn": [
        "pkg:npm/glob@3.1.21",
        "pkg:npm/lodash@1.0.2",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/gaze@0.5.1",
      "dependsOn": [
        "pkg:npm/globule@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/glob-watcher@0.0.6",
      "dependsOn": [
        "pkg:npm/gaze@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/first-chunk-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@1.0.0",
      "dependsOn": [
        "pkg:npm/first-chunk-stream@1.0.0",
        "pkg:npm/is-utf8@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-fs@0.3.13",
      "dependsOn": [
        "pkg:npm/defaults@1.0.2",
        "pkg:npm/glob-stream@3.1.18",
        "pkg:npm/glob-watcher@0.0.6",
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/strip-bom@1.0.0",
        "pkg:npm/through2@0.6.3",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/gulp@3.8.11",
      "dependsOn": [
        "pkg:npm/archy@1.0.0",
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/deprecated@0.0.1",
        "pkg:npm/gulp-util@3.0.4",
        "pkg:npm/interpret@0.3.10",
        "pkg:npm/liftoff@2.0.3",
        "pkg:npm/minimist@1.1.1",
        "pkg:npm/orchestrator@0.3.7",
        "pkg:npm/pretty-hrtime@0.2.2",
        "pkg:npm/semver@4.3.3",
        "pkg:npm/tildify@1.0.0",
        "pkg:npm/v8flags@2.0.3",
        "pkg:npm/vinyl-fs@0.3.13"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.4.2",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/concat-with-sourcemaps@1.0.2",
      "dependsOn": [
        "pkg:npm/source-map@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/gulp-concat@2.5.2",
      "dependsOn": [
        "pkg:npm/concat-with-sourcemaps@1.0.2",
        "pkg:npm/gulp-util@3.0.4",
        "pkg:npm/through2@0.6.3"
      ]
    },
    {
      "ref": "pkg:npm/lodash._reinterpolate@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._escapestringchar@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._shimkeys@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.keys@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1",
        "pkg:npm/lodash._shimkeys@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.defaults@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._objecttypes@2.4.1",
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._htmlescapes@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._escapehtmlchar@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._htmlescapes@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._reunescapedhtml@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._htmlescapes@2.4.1",
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.escape@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._escapehtmlchar@2.4.1",
        "pkg:npm/lodash._reunescapedhtml@2.4.1",
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.templatesettings@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@2.4.1",
        "pkg:npm/lodash.escape@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.values@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.template@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._escapestringchar@2.4.1",
        "pkg:npm/lodash._reinterpolate@2.4.1",
        "pkg:npm/lodash.defaults@2.4.1",
        "pkg:npm/lodash.escape@2.4.1",
        "pkg:npm/lodash.keys@2.4.1",
        "pkg:npm/lodash.templatesettings@2.4.1",
        "pkg:npm/lodash.values@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/vinyl@0.2.3",
      "dependsOn": [
        "pkg:npm/clone-stats@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-util@2.2.20",
      "dependsOn": [
        "pkg:npm/chalk@0.5.1",
        "pkg:npm/dateformat@1.0.11",
        "pkg:npm/lodash._reinterpolate@2.4.1",
        "pkg:npm/lodash.template@2.4.1",
        "pkg:npm/minimist@0.2.0",
        "pkg:npm/multipipe@0.1.2",
        "pkg:npm/through2@0.5.1",
        "pkg:npm/vinyl@0.2.3"
      ]
    },
    {
      "ref": "pkg:npm/gulp-foreach@0.0.1",
      "dependsOn": [
        "pkg:npm/gulp-util@2.2.20",
        "pkg:npm/through@2.3.6"
      ]
    },
    {
      "ref": "pkg:npm/glob@5.0.3",
      "dependsOn": [
        "pkg:npm/inflight@1.0.4",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@2.0.4",
        "pkg:npm/once@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/cli@0.4.5",
      "dependsOn": [
        "pkg:npm/glob@5.0.3"
      ]
    },
    {
      "ref": "pkg:npm/console-browserify@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domhandler@2.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.1.6",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.3.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.1.0",
        "pkg:npm/domutils@1.1.6",
        "pkg:npm/readable-stream@1.0.33"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@0.4.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.5.0",
        "pkg:npm/sigmund@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shelljs@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jshint@2.4.4",
      "dependsOn": [
        "pkg:npm/cli@0.4.5",
        "pkg:npm/console-browserify@0.1.6",
        "pkg:npm/exit@0.1.2",
        "pkg:npm/htmlparser2@3.3.0",
        "pkg:npm/minimatch@0.4.0",
        "pkg:npm/shelljs@0.1.4",
        "pkg:npm/underscore@1.4.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash._arraypool@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._getarray@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._arraypool@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._maxpoolsize@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._releasearray@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._arraypool@2.4.1",
        "pkg:npm/lodash._maxpoolsize@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._slice@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.noop@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._setbinddata@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1",
        "pkg:npm/lodash.noop@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._basecreate@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1",
        "pkg:npm/lodash.noop@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._basebind@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._basecreate@2.4.1",
        "pkg:npm/lodash._setbinddata@2.4.1",
        "pkg:npm/lodash._slice@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._basecreatewrapper@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._basecreate@2.4.1",
        "pkg:npm/lodash._setbinddata@2.4.1",
        "pkg:npm/lodash._slice@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._createwrapper@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._basebind@2.4.1",
        "pkg:npm/lodash._basecreatewrapper@2.4.1",
        "pkg:npm/lodash._slice@2.4.1",
        "pkg:npm/lodash.isfunction@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.bind@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._createwrapper@2.4.1",
        "pkg:npm/lodash._slice@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.identity@2.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.support@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._basecreatecallback@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._setbinddata@2.4.1",
        "pkg:npm/lodash.bind@2.4.1",
        "pkg:npm/lodash.identity@2.4.1",
        "pkg:npm/lodash.support@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.assign@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._basecreatecallback@2.4.1",
        "pkg:npm/lodash._objecttypes@2.4.1",
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.forown@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._basecreatecallback@2.4.1",
        "pkg:npm/lodash._objecttypes@2.4.1",
        "pkg:npm/lodash.keys@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.foreach@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._basecreatecallback@2.4.1",
        "pkg:npm/lodash.forown@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.isarray@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._isnative@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash._baseclone@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._getarray@2.4.1",
        "pkg:npm/lodash._releasearray@2.4.1",
        "pkg:npm/lodash._slice@2.4.1",
        "pkg:npm/lodash.assign@2.4.1",
        "pkg:npm/lodash.foreach@2.4.1",
        "pkg:npm/lodash.forown@2.4.1",
        "pkg:npm/lodash.isarray@2.4.1",
        "pkg:npm/lodash.isobject@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash.clone@2.4.1",
      "dependsOn": [
        "pkg:npm/lodash._baseclone@2.4.1",
        "pkg:npm/lodash._basecreatecallback@2.4.1"
      ]
    },
    {
      "ref": "pkg:npm/gulp-jshint@1.4.2",
      "dependsOn": [
        "pkg:npm/gulp-util@2.2.20",
        "pkg:npm/jshint@2.4.4",
        "pkg:npm/lodash.clone@2.4.1",
        "pkg:npm/map-stream@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/gulp-rename@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gulp-sourcemaps@1.5.1",
      "dependsOn": [
        "pkg:npm/convert-source-map@1.0.0",
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/strip-bom@1.0.0",
        "pkg:npm/through2@0.6.3",
        "pkg:npm/vinyl@0.4.6"
      ]
    },
    {
      "ref": "pkg:npm/deepmerge@0.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@2.4.16",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/optimist@0.3.7",
        "pkg:npm/source-map@0.1.34",
        "pkg:npm/uglify-to-browserify@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/vinyl-sourcemaps-apply@0.1.4",
      "dependsOn": [
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/gulp-uglify@1.1.0",
      "dependsOn": [
        "pkg:npm/deepmerge@0.2.7",
        "pkg:npm/gulp-util@3.0.4",
        "pkg:npm/through2@0.6.3",
        "pkg:npm/uglify-js@2.4.16",
        "pkg:npm/vinyl-sourcemaps-apply@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/log-symbols@1.0.2",
      "dependsOn": [
        "pkg:npm/chalk@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/string-length@1.0.0",
      "dependsOn": [
        "pkg:npm/strip-ansi@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/text-table@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jshint-stylish@1.0.1",
      "dependsOn": [
        "pkg:npm/chalk@1.0.0",
        "pkg:npm/log-symbols@1.0.2",
        "pkg:npm/string-length@1.0.0",
        "pkg:npm/text-table@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/nan@1.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fsevents@0.3.5",
      "dependsOn": [
        "pkg:npm/nan@1.5.3"
      ]
    },
    {
      "ref": "pkg:npm/depd@0.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ee-first@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.1.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/qs@2.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@1.3.0",
      "dependsOn": [
        "pkg:npm/bytes@1.0.0",
        "pkg:npm/iconv-lite@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/type-is@1.5.7",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.0.10"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.8.4",
      "dependsOn": [
        "pkg:npm/bytes@1.0.0",
        "pkg:npm/depd@0.4.5",
        "pkg:npm/iconv-lite@0.4.4",
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/on-finished@2.1.0",
        "pkg:npm/qs@2.2.4",
        "pkg:npm/raw-body@1.3.0",
        "pkg:npm/type-is@1.5.7"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.4.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.1.4",
      "dependsOn": [
        "pkg:npm/mime-types@2.0.10",
        "pkg:npm/negotiator@0.4.9"
      ]
    },
    {
      "ref": "pkg:npm/compressible@2.0.2",
      "dependsOn": [
        "pkg:npm/mime-db@1.8.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.0.0",
      "dependsOn": [
        "pkg:npm/ms@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/on-headers@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.1.2",
      "dependsOn": [
        "pkg:npm/accepts@1.1.4",
        "pkg:npm/bytes@1.0.0",
        "pkg:npm/compressible@2.0.2",
        "pkg:npm/debug@2.0.0",
        "pkg:npm/on-headers@1.0.0",
        "pkg:npm/vary@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/connect-timeout@1.3.0",
      "dependsOn": [
        "pkg:npm/debug@2.0.0",
        "pkg:npm/ms@0.6.2",
        "pkg:npm/on-headers@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cookie-parser@1.3.4",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-url@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/scmp@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/native-or-bluebird@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uid-safe@1.1.0",
      "dependsOn": [
        "pkg:npm/base64-url@1.2.1",
        "pkg:npm/native-or-bluebird@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/csrf@2.0.6",
      "dependsOn": [
        "pkg:npm/base64-url@1.2.1",
        "pkg:npm/rndm@1.1.0",
        "pkg:npm/scmp@1.0.0",
        "pkg:npm/uid-safe@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/statuses@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.2.8",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/statuses@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/csurf@1.6.6",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.5",
        "pkg:npm/cookie@0.1.2",
        "pkg:npm/csrf@2.0.6",
        "pkg:npm/http-errors@1.2.8"
      ]
    },
    {
      "ref": "pkg:npm/errorhandler@1.2.4",
      "dependsOn": [
        "pkg:npm/accepts@1.1.4",
        "pkg:npm/escape-html@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/crc@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/native-or-bluebird@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/thenify@3.1.0",
      "dependsOn": [
        "pkg:npm/native-or-bluebird@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/thenify-all@1.6.0",
      "dependsOn": [
        "pkg:npm/thenify@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/mz@1.3.0",
      "dependsOn": [
        "pkg:npm/native-or-bluebird@1.2.0",
        "pkg:npm/thenify-all@1.6.0",
        "pkg:npm/thenify@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/uid-safe@1.0.1",
      "dependsOn": [
        "pkg:npm/base64-url@1.2.1",
        "pkg:npm/mz@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/express-session@1.8.2",
      "dependsOn": [
        "pkg:npm/cookie-signature@1.0.5",
        "pkg:npm/cookie@0.1.2",
        "pkg:npm/crc@3.0.0",
        "pkg:npm/debug@2.0.0",
        "pkg:npm/depd@0.4.5",
        "pkg:npm/on-headers@1.0.0",
        "pkg:npm/parseurl@1.3.0",
        "pkg:npm/uid-safe@1.0.1",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/finalhandler@0.2.0",
      "dependsOn": [
        "pkg:npm/debug@2.0.0",
        "pkg:npm/escape-html@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/methods@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/method-override@2.2.0",
      "dependsOn": [
        "pkg:npm/debug@2.0.0",
        "pkg:npm/methods@1.1.0",
        "pkg:npm/parseurl@1.3.0",
        "pkg:npm/vary@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/basic-auth@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/morgan@1.3.2",
      "dependsOn": [
        "pkg:npm/basic-auth@1.0.0",
        "pkg:npm/depd@0.4.5",
        "pkg:npm/on-finished@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/multiparty@3.3.2",
      "dependsOn": [
        "pkg:npm/readable-stream@1.1.13",
        "pkg:npm/stream-counter@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/response-time@2.0.1",
      "dependsOn": [
        "pkg:npm/on-headers@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/serve-favicon@2.1.7",
      "dependsOn": [
        "pkg:npm/etag@1.5.1",
        "pkg:npm/fresh@0.2.4",
        "pkg:npm/ms@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/batch@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-index@1.2.1",
      "dependsOn": [
        "pkg:npm/accepts@1.1.4",
        "pkg:npm/batch@0.5.1",
        "pkg:npm/debug@2.0.0",
        "pkg:npm/parseurl@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/etag@1.4.0",
      "dependsOn": [
        "pkg:npm/crc@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/send@0.9.3",
      "dependsOn": [
        "pkg:npm/debug@2.0.0",
        "pkg:npm/depd@0.4.5",
        "pkg:npm/destroy@1.0.3",
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/etag@1.4.0",
        "pkg:npm/fresh@0.2.4",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/ms@0.6.2",
        "pkg:npm/on-finished@2.1.0",
        "pkg:npm/range-parser@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.6.5",
      "dependsOn": [
        "pkg:npm/escape-html@1.0.1",
        "pkg:npm/parseurl@1.3.0",
        "pkg:npm/send@0.9.3",
        "pkg:npm/utils-merge@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/vhost@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/connect@2.26.6",
      "dependsOn": [
        "pkg:npm/basic-auth-connect@1.0.0",
        "pkg:npm/body-parser@1.8.4",
        "pkg:npm/bytes@1.0.0",
        "pkg:npm/compression@1.1.2",
        "pkg:npm/connect-timeout@1.3.0",
        "pkg:npm/cookie-parser@1.3.4",
        "pkg:npm/cookie-signature@1.0.5",
        "pkg:npm/cookie@0.1.2",
        "pkg:npm/csurf@1.6.6",
        "pkg:npm/debug@2.0.0",
        "pkg:npm/depd@0.4.5",
        "pkg:npm/errorhandler@1.2.4",
        "pkg:npm/express-session@1.8.2",
        "pkg:npm/finalhandler@0.2.0",
        "pkg:npm/fresh@0.2.4",
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/method-override@2.2.0",
        "pkg:npm/morgan@1.3.2",
        "pkg:npm/multiparty@3.3.2",
        "pkg:npm/on-headers@1.0.0",
        "pkg:npm/parseurl@1.3.0",
        "pkg:npm/pause@0.0.1",
        "pkg:npm/qs@2.2.4",
        "pkg:npm/response-time@2.0.1",
        "pkg:npm/serve-favicon@2.1.7",
        "pkg:npm/serve-index@1.2.1",
        "pkg:npm/serve-static@1.6.5",
        "pkg:npm/type-is@1.5.7",
        "pkg:npm/vhost@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/array-slice@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-number@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-string@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-range@0.1.1",
      "dependsOn": [
        "pkg:npm/is-number@0.1.1",
        "pkg:npm/repeat-string@0.2.2"
      ]
    },
    {
      "ref": "pkg:npm/braces@0.1.5",
      "dependsOn": [
        "pkg:npm/expand-range@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/expand-braces@0.1.1",
      "dependsOn": [
        "pkg:npm/array-slice@0.2.2",
        "pkg:npm/array-uniq@1.0.2",
        "pkg:npm/braces@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/i@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ncp@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/utile@0.2.1",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/deep-equal@1.0.0",
        "pkg:npm/i@0.3.3",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/ncp@0.4.2",
        "pkg:npm/rimraf@2.2.8"
      ]
    },
    {
      "ref": "pkg:npm/http-proxy@0.10.4",
      "dependsOn": [
        "pkg:npm/colors@0.6.2",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/pkginfo@0.3.0",
        "pkg:npm/utile@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/semver@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/log4js@0.6.22",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/semver@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.1.0",
      "dependsOn": [
        "pkg:npm/ms@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/base64id@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@1.0.3",
      "dependsOn": [
        "pkg:npm/ms@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/after@0.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arraybuffer.slice@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-arraybuffer@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/blob@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-binary@0.1.5",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/utf8@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-parser@1.2.1",
      "dependsOn": [
        "pkg:npm/after@0.8.1",
        "pkg:npm/arraybuffer.slice@0.0.6",
        "pkg:npm/base64-arraybuffer@0.1.2",
        "pkg:npm/blob@0.0.2",
        "pkg:npm/has-binary@0.1.5",
        "pkg:npm/utf8@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/nan@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/options@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ultron@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@0.5.0",
      "dependsOn": [
        "pkg:npm/nan@1.4.3",
        "pkg:npm/options@0.0.6",
        "pkg:npm/ultron@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/engine.io@1.5.1",
      "dependsOn": [
        "pkg:npm/base64id@0.1.0",
        "pkg:npm/debug@1.0.3",
        "pkg:npm/engine.io-parser@1.2.1",
        "pkg:npm/ws@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/has-binary-data@0.1.3",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object-keys@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-emitter@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@0.7.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json3@3.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-parser@2.2.2",
      "dependsOn": [
        "pkg:npm/benchmark@1.0.0",
        "pkg:npm/component-emitter@1.1.2",
        "pkg:npm/debug@0.7.4",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/json3@3.2.6"
      ]
    },
    {
      "ref": "pkg:npm/socket.io-adapter@0.3.1",
      "dependsOn": [
        "pkg:npm/debug@1.0.2",
        "pkg:npm/object-keys@1.0.1",
        "pkg:npm/socket.io-parser@2.2.2"
      ]
    },
    {
      "ref": "pkg:npm/backo2@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-bind@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-inherit@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@1.0.4",
      "dependsOn": [
        "pkg:npm/ms@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/global@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-cors@1.0.3",
      "dependsOn": [
        "pkg:npm/global@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/better-assert@1.0.2",
      "dependsOn": [
        "pkg:npm/callsite@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/parsejson@0.0.1",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parseqs@0.0.2",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parseuri@0.0.4",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/commander@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tinycolor@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@0.4.31",
      "dependsOn": [
        "pkg:npm/commander@0.6.1",
        "pkg:npm/nan@0.3.2",
        "pkg:npm/options@0.0.6",
        "pkg:npm/tinycolor@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/xmlhttprequest@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-client@1.5.1",
      "dependsOn": [
        "pkg:npm/component-emitter@1.1.2",
        "pkg:npm/component-inherit@0.0.3",
        "pkg:npm/debug@1.0.4",
        "pkg:npm/engine.io-parser@1.2.1",
        "pkg:npm/has-cors@1.0.3",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/parsejson@0.0.1",
        "pkg:npm/parseqs@0.0.2",
        "pkg:npm/parseuri@0.0.4",
        "pkg:npm/ws@0.4.31",
        "pkg:npm/xmlhttprequest@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/has-binary@0.1.6",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/object-component@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseuri@0.0.2",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/socket.io-parser@2.2.4",
      "dependsOn": [
        "pkg:npm/benchmark@1.0.0",
        "pkg:npm/component-emitter@1.1.2",
        "pkg:npm/debug@0.7.4",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/json3@3.2.6"
      ]
    },
    {
      "ref": "pkg:npm/to-array@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-client@1.3.5",
      "dependsOn": [
        "pkg:npm/backo2@1.0.2",
        "pkg:npm/component-bind@1.0.0",
        "pkg:npm/component-emitter@1.1.2",
        "pkg:npm/debug@0.7.4",
        "pkg:npm/engine.io-client@1.5.1",
        "pkg:npm/has-binary@0.1.6",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/object-component@0.0.3",
        "pkg:npm/parseuri@0.0.2",
        "pkg:npm/socket.io-parser@2.2.4",
        "pkg:npm/to-array@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/socket.io@1.3.5",
      "dependsOn": [
        "pkg:npm/debug@2.1.0",
        "pkg:npm/engine.io@1.5.1",
        "pkg:npm/has-binary-data@0.1.3",
        "pkg:npm/socket.io-adapter@0.3.1",
        "pkg:npm/socket.io-client@1.3.5",
        "pkg:npm/socket.io-parser@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/lru-cache@2.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/useragent@2.0.10",
      "dependsOn": [
        "pkg:npm/lru-cache@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/karma@0.12.32",
      "dependsOn": [
        "pkg:npm/chokidar@0.12.6",
        "pkg:npm/colors@0.6.2",
        "pkg:npm/connect@2.26.6",
        "pkg:npm/di@0.0.1",
        "pkg:npm/expand-braces@0.1.1",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/http-proxy@0.10.4",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/log4js@0.6.22",
        "pkg:npm/memoizee@0.3.8",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/minimatch@0.2.14",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/q@0.9.7",
        "pkg:npm/rimraf@2.2.8",
        "pkg:npm/socket.io@1.3.5",
        "pkg:npm/source-map@0.1.43",
        "pkg:npm/useragent@2.0.10"
      ]
    },
    {
      "ref": "pkg:npm/browserstack@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/karma-browserstack-launcher@0.1.2",
      "dependsOn": [
        "pkg:npm/browserstack@1.0.1",
        "pkg:npm/browserstacktunnel-wrapper@1.3.1",
        "pkg:npm/karma@0.12.32",
        "pkg:npm/q@0.9.7"
      ]
    },
    {
      "ref": "pkg:npm/karma-chrome-launcher@0.1.5",
      "dependsOn": [
        "pkg:npm/karma@0.12.32"
      ]
    },
    {
      "ref": "pkg:npm/karma-firefox-launcher@0.1.3",
      "dependsOn": [
        "pkg:npm/karma@0.12.32"
      ]
    },
    {
      "ref": "pkg:npm/karma-jasmine@0.1.5",
      "dependsOn": [
        "pkg:npm/karma@0.12.32"
      ]
    },
    {
      "ref": "pkg:npm/xmlbuilder@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/karma-junit-reporter@0.2.2",
      "dependsOn": [
        "pkg:npm/karma@0.12.32",
        "pkg:npm/xmlbuilder@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/karma-ng-scenario@0.1.0",
      "dependsOn": [
        "pkg:npm/karma@0.12.32"
      ]
    },
    {
      "ref": "pkg:npm/adm-zip@0.4.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sauce-connect-launcher@0.6.1",
      "dependsOn": [
        "pkg:npm/adm-zip@0.4.7",
        "pkg:npm/async@0.9.0",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/rimraf@2.2.8"
      ]
    },
    {
      "ref": "pkg:npm/saucelabs@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-stream@1.0.2",
      "dependsOn": [
        "pkg:npm/bl@0.9.4",
        "pkg:npm/end-of-stream@1.1.0",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/xtend@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/archiver@0.12.0",
      "dependsOn": [
        "pkg:npm/async@0.9.0",
        "pkg:npm/buffer-crc32@0.2.5",
        "pkg:npm/glob@4.0.6",
        "pkg:npm/lazystream@0.1.0",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/readable-stream@1.0.33",
        "pkg:npm/tar-stream@1.0.2",
        "pkg:npm/zip-stream@0.4.1"
      ]
    },
    {
      "ref": "pkg:npm/request@2.46.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/bl@0.9.4",
        "pkg:npm/caseless@0.6.0",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.1.4",
        "pkg:npm/hawk@1.1.1",
        "pkg:npm/http-signature@0.10.1",
        "pkg:npm/json-stringify-safe@5.0.0",
        "pkg:npm/mime-types@1.0.2",
        "pkg:npm/node-uuid@1.4.3",
        "pkg:npm/oauth-sign@0.4.0",
        "pkg:npm/qs@1.2.2",
        "pkg:npm/stringstream@0.0.4",
        "pkg:npm/tough-cookie@0.12.1",
        "pkg:npm/tunnel-agent@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/vargs@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wd@0.3.11",
      "dependsOn": [
        "pkg:npm/archiver@0.12.0",
        "pkg:npm/async@0.9.0",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/q@1.0.1",
        "pkg:npm/request@2.46.0",
        "pkg:npm/underscore.string@2.3.3",
        "pkg:npm/vargs@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/karma-sauce-launcher@0.2.10",
      "dependsOn": [
        "pkg:npm/karma@0.12.32",
        "pkg:npm/q@0.9.7",
        "pkg:npm/sauce-connect-launcher@0.6.1",
        "pkg:npm/saucelabs@0.1.1",
        "pkg:npm/wd@0.3.11"
      ]
    },
    {
      "ref": "pkg:npm/karma-script-launcher@0.1.0",
      "dependsOn": [
        "pkg:npm/karma@0.12.32"
      ]
    },
    {
      "ref": "pkg:npm/array-differ@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@0.1.0",
      "dependsOn": [
        "pkg:npm/array-uniq@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/multimatch@0.3.0",
      "dependsOn": [
        "pkg:npm/array-differ@0.1.0",
        "pkg:npm/array-union@0.1.0",
        "pkg:npm/minimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/load-grunt-tasks@0.6.0",
      "dependsOn": [
        "pkg:npm/findup-sync@0.1.3",
        "pkg:npm/multimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/diff@1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@3.2.3",
      "dependsOn": [
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jade@0.26.3",
      "dependsOn": [
        "pkg:npm/commander@0.6.1",
        "pkg:npm/mkdirp@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/mocha@1.21.5",
      "dependsOn": [
        "pkg:npm/commander@2.3.0",
        "pkg:npm/debug@2.0.0",
        "pkg:npm/diff@1.0.8",
        "pkg:npm/escape-string-regexp@1.0.2",
        "pkg:npm/glob@3.2.3",
        "pkg:npm/growl@1.8.1",
        "pkg:npm/jade@0.26.3",
        "pkg:npm/mkdirp@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/samsam@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/formatio@1.1.1",
      "dependsOn": [
        "pkg:npm/samsam@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/lolex@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sinon@1.14.1",
      "dependsOn": [
        "pkg:npm/formatio@1.1.1",
        "pkg:npm/lolex@1.1.0",
        "pkg:npm/util@0.10.3"
      ]
    },
    {
      "ref": "pkg:npm/promises-aplus-tests@2.1.0",
      "dependsOn": [
        "pkg:npm/mocha@1.21.5",
        "pkg:npm/sinon@1.14.1",
        "pkg:npm/underscore@1.6.0"
      ]
    },
    {
      "ref": "pkg:npm/accessibility-developer-tools@2.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/adm-zip@0.4.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.6.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/html-entities@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine-core@2.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasmine@2.3.1",
      "dependsOn": [
        "pkg:npm/exit@0.1.2",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/jasmine-core@2.3.4"
      ]
    },
    {
      "ref": "pkg:npm/jasminewd@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jasminewd2@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minijasminenode@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.9.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hawk@1.0.0",
      "dependsOn": [
        "pkg:npm/boom@0.4.2",
        "pkg:npm/cryptiles@0.2.2",
        "pkg:npm/hoek@0.9.1",
        "pkg:npm/sntp@0.2.4"
      ]
    },
    {
      "ref": "pkg:npm/oauth-sign@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.36.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.5.0",
        "pkg:npm/forever-agent@0.5.2",
        "pkg:npm/form-data@0.1.4",
        "pkg:npm/hawk@1.0.0",
        "pkg:npm/http-signature@0.10.1",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime@1.2.11",
        "pkg:npm/node-uuid@1.4.3",
        "pkg:npm/oauth-sign@0.3.0",
        "pkg:npm/qs@0.6.6",
        "pkg:npm/tough-cookie@1.1.0",
        "pkg:npm/tunnel-agent@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/once@1.3.2",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@2.0.8",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.3.4",
      "dependsOn": [
        "pkg:npm/glob@4.5.3"
      ]
    },
    {
      "ref": "pkg:npm/tmp@0.0.24",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bindings@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@1.8.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bufferutil@1.1.0",
      "dependsOn": [
        "pkg:npm/bindings@1.2.1",
        "pkg:npm/nan@1.8.4"
      ]
    },
    {
      "ref": "pkg:npm/utf-8-validate@1.1.0",
      "dependsOn": [
        "pkg:npm/bindings@1.2.1",
        "pkg:npm/nan@1.8.4"
      ]
    },
    {
      "ref": "pkg:npm/ws@0.7.2",
      "dependsOn": [
        "pkg:npm/bufferutil@1.1.0",
        "pkg:npm/options@0.0.6",
        "pkg:npm/ultron@1.0.1",
        "pkg:npm/utf-8-validate@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/sax@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@3.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@2.6.2",
      "dependsOn": [
        "pkg:npm/lodash@3.5.0"
      ]
    },
    {
      "ref": "pkg:npm/xml2js@0.4.4",
      "dependsOn": [
        "pkg:npm/sax@0.6.1",
        "pkg:npm/xmlbuilder@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/selenium-webdriver@2.45.1",
      "dependsOn": [
        "pkg:npm/adm-zip@0.4.4",
        "pkg:npm/rimraf@2.3.4",
        "pkg:npm/tmp@0.0.24",
        "pkg:npm/ws@0.7.2",
        "pkg:npm/xml2js@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.1.32",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/source-map-support@0.2.10",
      "dependsOn": [
        "pkg:npm/source-map@0.1.32"
      ]
    },
    {
      "ref": "pkg:npm/protractor@2.1.0",
      "dependsOn": [
        "pkg:npm/accessibility-developer-tools@2.6.0",
        "pkg:npm/adm-zip@0.4.4",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/html-entities@1.1.2",
        "pkg:npm/jasmine@2.3.1",
        "pkg:npm/jasminewd2@0.0.5",
        "pkg:npm/jasminewd@1.1.0",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/minijasminenode@1.1.1",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/q@1.0.0",
        "pkg:npm/request@2.36.0",
        "pkg:npm/saucelabs@0.1.1",
        "pkg:npm/selenium-webdriver@2.45.1",
        "pkg:npm/source-map-support@0.2.10"
      ]
    },
    {
      "ref": "pkg:npm/q-io@1.12.0",
      "dependsOn": [
        "pkg:npm/collections@0.2.2",
        "pkg:npm/mime@1.3.4",
        "pkg:npm/mimeparse@0.1.4",
        "pkg:npm/q@1.0.1",
        "pkg:npm/qs@1.2.2",
        "pkg:npm/url2@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/q@0.8.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qq@0.3.5",
      "dependsOn": [
        "pkg:npm/q@0.8.4"
      ]
    },
    {
      "ref": "pkg:npm/rewire@2.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sorted-object@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/angular@1.4.7-tuxcare.2",
      "dependsOn": [
        "pkg:npm/angular-benchpress@0.2.2",
        "pkg:npm/benchmark@1.0.0",
        "pkg:npm/bower@1.3.12",
        "pkg:npm/browserstacktunnel-wrapper@1.3.1",
        "pkg:npm/canonical-path@0.0.2",
        "pkg:npm/cheerio@0.17.0",
        "pkg:npm/dgeni-packages@0.10.19",
        "pkg:npm/dgeni@0.4.1",
        "pkg:npm/event-stream@3.1.7",
        "pkg:npm/grunt-bump@0.0.17",
        "pkg:npm/grunt-contrib-clean@0.6.0",
        "pkg:npm/grunt-contrib-compress@0.12.0",
        "pkg:npm/grunt-contrib-connect@0.8.0",
        "pkg:npm/grunt-contrib-copy@0.6.0",
        "pkg:npm/grunt-contrib-jshint@0.10.0",
        "pkg:npm/grunt-ddescribe-iit@0.0.6",
        "pkg:npm/grunt-jscs@1.2.0",
        "pkg:npm/grunt-merge-conflict@0.0.2",
        "pkg:npm/grunt-shell@1.1.2",
        "pkg:npm/grunt@0.4.5",
        "pkg:npm/gulp-concat@2.5.2",
        "pkg:npm/gulp-foreach@0.0.1",
        "pkg:npm/gulp-jshint@1.4.2",
        "pkg:npm/gulp-rename@1.2.2",
        "pkg:npm/gulp-sourcemaps@1.5.1",
        "pkg:npm/gulp-uglify@1.1.0",
        "pkg:npm/gulp-util@3.0.4",
        "pkg:npm/gulp@3.8.11",
        "pkg:npm/jasmine-node@1.14.5",
        "pkg:npm/jasmine-reporters@1.0.1",
        "pkg:npm/jshint-stylish@1.0.1",
        "pkg:npm/karma-browserstack-launcher@0.1.2",
        "pkg:npm/karma-chrome-launcher@0.1.5",
        "pkg:npm/karma-firefox-launcher@0.1.3",
        "pkg:npm/karma-jasmine@0.1.5",
        "pkg:npm/karma-junit-reporter@0.2.2",
        "pkg:npm/karma-ng-scenario@0.1.0",
        "pkg:npm/karma-sauce-launcher@0.2.10",
        "pkg:npm/karma-script-launcher@0.1.0",
        "pkg:npm/karma@0.12.32",
        "pkg:npm/load-grunt-tasks@0.6.0",
        "pkg:npm/lodash@2.4.1",
        "pkg:npm/marked@0.3.3",
        "pkg:npm/node-html-encoder@0.0.2",
        "pkg:npm/promises-aplus-tests@2.1.0",
        "pkg:npm/protractor@2.1.0",
        "pkg:npm/q-io@1.12.0",
        "pkg:npm/q@1.0.1",
        "pkg:npm/qq@0.3.5",
        "pkg:npm/rewire@2.1.5",
        "pkg:npm/semver@4.0.3",
        "pkg:npm/shelljs@0.3.0",
        "pkg:npm/sorted-object@1.0.0",
        "pkg:npm/stringmap@0.2.2"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/angular@1.4.7-tuxcare.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-27T10:46:10Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, August 27, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'angular' with version '1.4.7-tuxcare.2'."
    }
  ]
}