{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "serialNumber": "urn:uuid:c6dcb5f0-c558-4179-afb6-6fcb2b456757",
  "metadata": {
    "timestamp": "2026-04-04T12:35:27.197Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "npm",
          "version": "11.6.2"
        },
        {
          "type": "application",
          "name": "cyclonedx-npm",
          "group": "@cyclonedx",
          "version": "4.2.1",
          "author": "Jan Kowalleck",
          "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        },
        {
          "type": "library",
          "name": "cyclonedx-library",
          "group": "@cyclonedx",
          "version": "10.0.0",
          "author": "Jan Kowalleck",
          "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "name": "lodash",
      "version": "1.3.1-tuxcare.1",
      "bom-ref": "lodash@1.3.1-tuxcare.1",
      "author": "John-David Dalton",
      "description": "A low-level utility library delivering consistency, customization, performance, and extra features.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash@1.3.1-tuxcare.1?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Fbestiejs%2Flodash.git",
      "externalReferences": [
        {
          "url": "git+https://github.com/bestiejs/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bestiejs/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": ""
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "name": "lodash-cli",
      "version": "1.3.2",
      "bom-ref": "lodash@1.3.1-tuxcare.1|lodash-cli@1.3.2",
      "author": "John-David Dalton",
      "description": "The Lo-Dash command-line interface.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash-cli@1.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash-cli.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lodash.com/custom-builds",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash-cli/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash-cli/-/lodash-cli-1.3.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash-cli"
        }
      ]
    },
    {
      "type": "library",
      "name": "closure-compiler",
      "version": "0.2.3",
      "bom-ref": "lodash@1.3.1-tuxcare.1|closure-compiler@0.2.3",
      "author": "tim-smart",
      "description": "Bindings to Google's Closure Compiler",
      "purl": "pkg:npm/closure-compiler@0.2.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/Tim-Smart/node-closure.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Tim-Smart/node-closure#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Tim-Smart/node-closure/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/closure-compiler/-/closure-compiler-0.2.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/closure-compiler"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash",
      "version": "1.3.1",
      "bom-ref": "lodash@1.3.1-tuxcare.1|lodash@1.3.1",
      "author": "John-David Dalton",
      "description": "A utility library delivering consistency, customization, performance, and extras.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash@1.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash/-/lodash-1.3.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-js",
      "version": "2.4.6",
      "bom-ref": "lodash@1.3.1-tuxcare.1|uglify-js@2.4.6",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "purl": "pkg:npm/uglify-js@2.4.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/mishoo/UglifyJS2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lisperator.net/uglifyjs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mishoo/UglifyJS2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.4.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "async",
      "version": "0.2.10",
      "bom-ref": "lodash@1.3.1-tuxcare.1|async@0.2.10",
      "author": "Caolan McMahon",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/caolan/async/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/caolan/async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/caolan/async#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/caolan/async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/async"
        }
      ]
    },
    {
      "type": "library",
      "name": "optimist",
      "version": "0.3.7",
      "bom-ref": "lodash@1.3.1-tuxcare.1|optimist@0.3.7",
      "author": "James Halliday",
      "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.3.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-optimist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-optimist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-optimist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.3.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/optimist"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map",
      "version": "0.1.43",
      "bom-ref": "lodash@1.3.1-tuxcare.1|source-map@0.1.43",
      "author": "Nick Fitzgerald",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/mozilla/source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mozilla/source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mozilla/source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.43.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "bom-ref": "lodash@1.3.1-tuxcare.1|uglify-to-browserify@1.0.2",
      "author": "ForbesLindesay",
      "description": "A transform to make UglifyJS work in browserify.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/uglify-to-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/uglify-to-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/uglify-to-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-to-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "wordwrap",
      "version": "0.0.3",
      "bom-ref": "lodash@1.3.1-tuxcare.1|wordwrap@0.0.3",
      "author": "James Halliday",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-wordwrap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wordwrap"
        }
      ]
    },
    {
      "type": "library",
      "name": "amdefine",
      "version": "1.0.1",
      "bom-ref": "lodash@1.3.1-tuxcare.1|amdefine@1.0.1",
      "author": "James Burke",
      "description": "Provide AMD's define() API for declaring modules in the AMD format",
      "licenses": [
        {
          "expression": "BSD-3-Clause OR MIT",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jrburke/amdefine.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/jrburke/amdefine",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jrburke/amdefine/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/amdefine"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "lodash@1.3.1-tuxcare.1",
      "dependsOn": [
        "lodash@1.3.1-tuxcare.1|lodash-cli@1.3.2"
      ]
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|lodash-cli@1.3.2",
      "dependsOn": [
        "lodash@1.3.1-tuxcare.1|closure-compiler@0.2.3",
        "lodash@1.3.1-tuxcare.1|lodash@1.3.1",
        "lodash@1.3.1-tuxcare.1|uglify-js@2.4.6"
      ]
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|closure-compiler@0.2.3"
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|lodash@1.3.1"
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|uglify-js@2.4.6",
      "dependsOn": [
        "lodash@1.3.1-tuxcare.1|async@0.2.10",
        "lodash@1.3.1-tuxcare.1|optimist@0.3.7",
        "lodash@1.3.1-tuxcare.1|source-map@0.1.43",
        "lodash@1.3.1-tuxcare.1|uglify-to-browserify@1.0.2"
      ]
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|async@0.2.10"
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|optimist@0.3.7",
      "dependsOn": [
        "lodash@1.3.1-tuxcare.1|wordwrap@0.0.3"
      ]
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|source-map@0.1.43",
      "dependsOn": [
        "lodash@1.3.1-tuxcare.1|amdefine@1.0.1"
      ]
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|uglify-to-browserify@1.0.2"
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|wordwrap@0.0.3"
    },
    {
      "ref": "lodash@1.3.1-tuxcare.1|amdefine@1.0.1"
    }
  ]
}