{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:f5336f4f-ec4b-4124-aa0b-934f1a55921e",
  "version": 1,
  "metadata": {
    "timestamp": "2026-04-23T11:49:48Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.2.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "distributionConstraints": {
      "tlp": "CLEAR"
    },
    "component": {
      "name": "lodash",
      "group": "",
      "version": "3.2.0-tuxcare.2",
      "purl": "pkg:npm/lodash@3.2.0-tuxcare.2",
      "bom-ref": "pkg:npm/lodash@3.2.0-tuxcare.2",
      "type": "application"
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "bower.json\\npackage-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "lodash",
      "version": "3.2.0",
      "scope": "optional",
      "purl": "pkg:npm/lodash@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/lodash@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "bower.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "bower.json"
              }
            ],
            "concludedValue": "bower.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "curl-amd",
      "version": "0.8.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eeb4cc06271eb56dd233ab3241fa7be94f75fd344f4582b3df639f680d0e1f613f1175ce9e9bd8e38c7e9de193e54156f12f05ab986391859ef0a386c0b66e54"
        }
      ],
      "purl": "pkg:npm/curl-amd@0.8.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/curl-amd/-/curl-amd-0.8.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/curl-amd@0.8.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/curl-amd/-/curl-amd-0.8.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dojo",
      "version": "1.10.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "920efd0bc632777d7b706dcc81718c1f801e43c4e036bf07fcfa40dc1466b3b0d37e5d0224244080613f0ba77d370e79b35203fdf12c7d2f8fddb8f5b3b75680"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-3-Clause OR AFL-2.1"
        }
      ],
      "purl": "pkg:npm/dojo@1.10.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dojo/-/dojo-1.10.10.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/dojo@1.10.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dojo/-/dojo-1.10.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "jquery",
      "version": "1.11.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4733f5cba1fa74149734ff402c466f2aff9a1bf9ad649e8faf7dc9571a8cda3013efdea0fb5ead7d96810255c041e0c38b772827ca779030f4ec1f942254d05"
        }
      ],
      "purl": "pkg:npm/jquery@1.11.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jquery/-/jquery-1.11.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/jquery@1.11.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jquery/-/jquery-1.11.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version is deprecated. Please upgrade to the latest version or find support at https://www.herodevs.com/support/jquery-nes."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "lodash-cli",
      "version": "3.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d0d9c3df19404179d1107bd8af152f100aba85e3cd8cae625d3e61986e8450fd2b96df70dec39b32bee8ab3284e318f592613696f2b513042263869a6f62278"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lodash-cli@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-cli/-/lodash-cli-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-cli@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-cli/-/lodash-cli-3.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "closure-compiler",
      "version": "0.2.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1994e5a02ddbf4d4911c5cf1742cf247e39c9ea6cbb05ce36c1a2df1a887a860f281f822de58aa743206203ba192b1316ad7b2e9533d5ada16616907c0a90a12"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/closure-compiler@0.2.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/closure-compiler/-/closure-compiler-0.2.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/closure-compiler@0.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/closure-compiler/-/closure-compiler-0.2.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "5.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e83661e8b28b2286878d0d9bdf423cde2faf7c3d8790a76bd4c09aaf0059758246f8838f9a75ff3e6f7fe91c37121897d1723bae224cefcae541a1db0adf3ade"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/glob@5.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-5.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@5.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-5.0.12.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "2.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d0a3aa35a9254b1166b0de5f9bc180365f4b8bb8ad8a8cd876c2380eed0ffd5099d7af5437c90291f01234fc1b7facf83be5ee92316e215bfe9c0475536548c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@2.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3163c67c3c67cb3294eeb34e5bd48ffdce74be2df1ae6aee6bffba85f3db092d8004d59fc76e2f3e2773bc2ee4ae353f453a36df9b15efbeb29a5b0cb462a3f2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash-compat",
      "version": "3.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "92bc30ac0595fee36af7f86b8e4ac94800eb72ea582a4cd5eeb9041359fab6d01c83413deb2d4f46647d992dda9a09b180fb292562816d5ce49f01062fa665df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/lodash-compat@3.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash-compat/-/lodash-compat-3.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash-compat@3.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash-compat/-/lodash-compat-3.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "4.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22ba49fb2a06e04387f03156b9583ef07d645b539aa1fd16c5eedc3dc5d6df1f418e437f795a39e05d792f2a9e9a70c8518b24416afdaaf97f4628664b2ebec5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/semver@4.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@4.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-4.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.4.23",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79bd9eb5988900bea5a920e1b31ae80b1f71e71f6ea2798c7b9370eeb6003c999577dbd188f93b64f2b064ee9eb33c6710906a22ad64a845382e3c16a009c1f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.4.23",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.4.23.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.4.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.4.23.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "0.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "78091da0ac54ebf2e42830732e94feb7a15fe44b5f485e30c7559f2623c4115ed634b9c36915e4d28572b2210f9b6eb6ae869a72119ec7052ff785a14a03794d"
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@0.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9f0b00e3d2f47d453c2dde913382581bdd98267171ede838c6ddb8c9bf33f04cbfb9cc3436321992cc0713cb4193890b828ab892597bd6335fcd84a757ba840"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.1.34.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b61f0d13b4d90c26121a6c1c08a2328bf581cee53d27e5e36a589ecbae57a5ff30db7ed429c696a98bcb59b375f51d66bebbe41ec9d1a6cf3354d26d3df9172"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-3-Clause OR MIT"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bdbdacd65631db106d520cbeb5af9bd89fc62d5511fb09a920dc0778f98f4613ac215086db00f3289d27d781ac947d4189fb2a57348ec1085168202c67f9c8e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e63dfcd84e31412b3bd69ff1650b14d4fb510361d73c08d7d04d0392818bc7034048c38a5fa03d76857536b6668fce6ed8f8eabb3e34daaa27073cffc8b3db3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "purl": "pkg:npm/yargs@3.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c332e40dae0afe6cc8d4e4884c2f835328e0225fc44cd1c4f50bd8832e89e89beacb2cf80b45df77e95085bd7db17da3329655e08b2c527d150d59a0955face2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d694cf40329375deb5a3394a18d0a384d45df8a3e680b4866b79994c7a0e962686704483f06d4f5e187b7357e088f8d56cd55f832d856b0e0123cfe6d1c0bc32"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "platform",
      "version": "1.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7e759596351c853ae8e9188216f09705b36125cd8d8a337ba084316f0b322f46ee5893c6f39bfcd5e8651c8f5f5eb26c30d813a1f12858841e0a52a983114bae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/platform@1.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/platform/-/platform-1.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/platform@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/platform/-/platform-1.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qunit-extras",
      "version": "1.4.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a3bbe528e50d1122b60a1569d7c16757e9fd10016086370252fa72d7e0fc74891bf7c8d2e7a256f415278fd5335d4fc5498ceb8f580f5e2568e5b91bcd9e0ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/qunit-extras@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qunit-extras/-/qunit-extras-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qunit-extras@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qunit-extras/-/qunit-extras-1.4.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qunitjs",
      "version": "1.17.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79f89f82557a837033cad56b0b1e6f412a20ec18907c8c34221d62a054efd4d8ec02b4503d39a848f146577e8a4df1675b919ec8a568979907c1d0c15bd61e84"
        }
      ],
      "purl": "pkg:npm/qunitjs@1.17.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qunitjs/-/qunitjs-1.17.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qunitjs@1.17.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qunitjs/-/qunitjs-1.17.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requirejs",
      "version": "2.1.22",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02166a37b52b595f11d9dd4b7c67f39ec90c24d17455beb24adc2b0a7e7651b92d260eb2e55d48ed1a0647226d0027bce9de743f2427d08c348d80ca32f73888"
        }
      ],
      "purl": "pkg:npm/requirejs@2.1.22",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requirejs/-/requirejs-2.1.22.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requirejs@2.1.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requirejs/-/requirejs-2.1.22.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/curl-amd@0.8.12",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dojo@1.10.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jquery@1.11.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/closure-compiler@0.2.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.14",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@2.0.10",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.14"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@5.0.12",
      "dependsOn": [
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/minimatch@2.0.10",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/lodash-compat@3.10.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@4.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/async@0.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.34",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/window-size@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.5.4",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/window-size@0.1.0",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.4.23",
      "dependsOn": [
        "pkg:npm/async@0.2.10",
        "pkg:npm/source-map@0.1.34",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/yargs@3.5.4"
      ]
    },
    {
      "ref": "pkg:npm/lodash-cli@3.10.1",
      "dependsOn": [
        "pkg:npm/closure-compiler@0.2.6",
        "pkg:npm/glob@5.0.12",
        "pkg:npm/lodash-compat@3.10.1",
        "pkg:npm/semver@4.3.6",
        "pkg:npm/uglify-js@2.4.23"
      ]
    },
    {
      "ref": "pkg:npm/platform@1.3.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qunit-extras@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qunitjs@1.17.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requirejs@2.1.22",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash@3.2.0-tuxcare.2",
      "dependsOn": [
        "pkg:npm/curl-amd@0.8.12",
        "pkg:npm/dojo@1.10.10",
        "pkg:npm/jquery@1.11.3",
        "pkg:npm/lodash-cli@3.10.1",
        "pkg:npm/platform@1.3.6",
        "pkg:npm/qunit-extras@1.4.5",
        "pkg:npm/qunitjs@1.17.1",
        "pkg:npm/requirejs@2.1.22"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/lodash@3.2.0-tuxcare.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.2.0",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.0",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.0",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-04-23T11:49:48Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, April 23, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'lodash' with version '3.2.0-tuxcare.2'."
    }
  ]
}