{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:6b6c32e9-c768-4937-abb4-ef482fd6beb7",
  "version": 1,
  "metadata": {
    "timestamp": "2026-11-06T16:59:35Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.9.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.9.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.9.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "authors": [
        {
          "name": "Medplum <hello@medplum.com>"
        }
      ],
      "group": "",
      "name": "create-medplum",
      "version": "5.2.15",
      "description": "Medplum NPM Initializer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-medplum@5.2.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/medplum/medplum.git"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/medplum/medplum/issues"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-medplum@5.2.15",
      "tags": [
        "clinical",
        "dstu2",
        "fhir",
        "healthcare",
        "hl7",
        "interoperability",
        "json",
        "medplum",
        "normative",
        "r4",
        "serialization",
        "standards",
        "stu3"
      ],
      "properties": [
        {
          "name": "SrcFile",
          "value": "packages/create-medplum/package-lock.json"
        },
        {
          "name": "cdx:npm:bin",
          "value": "medplum"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:npm:isWorkspace",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:resolvedPath",
          "value": "packages/create-medplum"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/medplum"
        },
        {
          "name": "cdx:npm:isLink",
          "value": "true"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "path"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "file:/app/packages/create-medplum"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@11ty\\n@adobe\\n@algolia\\n@antfu\\n@asamuzakjp\\n@aws\\n@aws-cdk\\n@aws-sdk\\n@azure\\n@azure-rest\\n@babel\\n@balena\\n@bcoe\\n@braintree\\n@bramus\\n@chevrotain\\n@colors\\n@csstools\\n@ctrl\\n@dabh\\n@discoveryjs\\n@docsearch\\n@docusaurus\\n@emnapi\\n@epic-web\\n@es-joy\\n@esbuild\\n@eslint\\n@eslint-community\\n@exodus\\n@fast-check\\n@floating-ui\\n@foliojs-fork\\n@full-ui\\n@fullcalendar\\n@google-cloud\\n@graphiql\\n@grpc\\n@hapi\\n@headlessui\\n@hono\\n@humanfs\\n@humanwhocodes\\n@iconify\\n@internationalized\\n@ioredis\\n@isaacs\\n@jest\\n@joshwooding\\n@jridgewell\\n@js-sdsl\\n@jsep-plugin\\n@jsonjoy.com\\n@kubernetes\\n@kurkle\\n@leichtgewicht\\n@lhncbc\\n@lit\\n@lit-labs\\n@loxjs\\n@mantine\\n@mdx-js\\n@medplum\\n@mermaid-js\\n@microsoft\\n@modelcontextprotocol\\n@module-federation\\n@msgpackr-extract\\n@n1ru4l\\n@napi-rs\\n@noble\\n@nodable\\n@nodelib\\n@opentelemetry\\n@otplib\\n@oxc-parser\\n@oxc-project\\n@oxc-resolver\\n@paralleldrive\\n@peculiar\\n@photonhealth\\n@playwright\\n@pnpm\\n@polka\\n@protobufjs\\n@radix-ui\\n@react-aria\\n@react-types\\n@reduxjs\\n@rolldown\\n@rollup\\n@rspack\\n@rtsao\\n@rushstack\\n@selderee\\n@shoelace-style\\n@sideway\\n@sinclair\\n@sindresorhus\\n@sinonjs\\n@slorber\\n@smart-health-checkin\\n@smithy\\n@so-ric\\n@solid-primitives\\n@standard-schema\\n@storybook\\n@svgr\\n@swc\\n@szmarczak\\n@tabler\\n@tanstack\\n@testing-library\\n@turbo\\n@tybys\\n@types\\n@typescript-eslint\\n@typespec\\n@ungap\\n@upsetjs\\n@vitejs\\n@vitest\\n@vueless\\n@webassemblyjs\\n@webcontainer\\n@xtuc\\n@zone-eu"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "examples/foomedical/package-lock.json\\nexamples/medplum-client-external-idp-demo/package-lock.json\\nexamples/medplum-demo-bots/package-lock.json\\nexamples/medplum-efax-demo/package-lock.json\\nexamples/medplum-eligibility-demo/package-lock.json\\nexamples/medplum-fhircast-demo/package-lock.json\\nexamples/medplum-fsh-profiles/package-lock.json\\nexamples/medplum-health-gorilla-demo/package-lock.json\\nexamples/medplum-healthie-importer/package-lock.json\\nexamples/medplum-hello-world/package-lock.json\\nexamples/medplum-mso-demo/package-lock.json\\nexamples/medplum-multilingual-demo/package-lock.json\\nexamples/medplum-patient-intake-demo/package-lock.json\\nexamples/medplum-photon-integration/package-lock.json\\nexamples/medplum-provider/package-lock.json\\nexamples/medplum-questionnaire-hooks/package-lock.json\\nexamples/medplum-smart-on-fhir-demo/package-lock.json\\nexamples/medplum-task-demo/package-lock.json\\nexamples/medplum-token-exchange-demo/package-lock.json\\nexamples/medplum-valueset-selector/package-lock.json\\nexamples/medplum-websocket-subscriptions-demo/package-lock.json\\npackage-lock.json\\npackages/agent/package-lock.json\\npackages/app/package-lock.json\\npackages/bot-layer/package-lock.json\\npackages/ccda/package-lock.json\\npackages/cdk/package-lock.json\\npackages/cli-wrapper/package-lock.json\\npackages/cli/package-lock.json\\npackages/core/package-lock.json\\npackages/create-medplum/package-lock.json\\npackages/definitions/package-lock.json\\npackages/docs/package-lock.json\\npackages/dosespot-core/package-lock.json\\npackages/dosespot-react/package-lock.json\\npackages/e2e/package-lock.json\\npackages/eslint-config/package-lock.json\\npackages/examples/package-lock.json\\npackages/fhir-router/package-lock.json\\npackages/fhirtypes/package-lock.json\\npackages/generator/package-lock.json\\npackages/graphiql/package-lock.json\\npackages/health-gorilla-core/package-lock.json\\npackages/health-gorilla-react/package-lock.json\\npackages/hl7/package-lock.json\\npackages/mock/package-lock.json\\npackages/react-hooks/package-lock.json\\npackages/react-scheduling/package-lock.json\\npackages/react/package-lock.json\\npackages/scriptsure-react/package-lock.json\\npackages/server/package-lock.json\\npackages/storybook/package-lock.json"
      }
    ]
  },
  "components": [],
  "dependencies": [
    {
      "ref": "pkg:npm/create-medplum@5.2.15",
      "dependsOn": []
    }
  ]
}